Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
B,null,null,null,v)):mxscript("js/extensions.min.js",B,null,null,null,v))};EditorUi.prototype.generatePlantUmlImage=function(d,g,n,t){function u(H,L,G){c1=H>>2;c2=(H&3)<<4|L>>4;c3=(L&15)<<2|G>>6;c4=G&63;r="";r+=v(c1&63);r+=v(c2&63);r+=v(c3&63);return r+=v(c4&63)}function v(H){if(10>H)return String.fromCharCode(48+H);H-=10;if(26>H)return String.fromCharCode(65+H);H-=26;if(26>H)return String.fromCharCode(97+H);H-=26;return 0==H?"-":1==H?"_":"?"}var B=new XMLHttpRequest;B.open("GET",("txt"==g?PLANT_URL+
"/txt/":"png"==g?PLANT_URL+"/png/":PLANT_URL+"/svg/")+function(H){r="";for(i=0;i<H.length;i+=3)r=i+2==H.length?r+u(H.charCodeAt(i),H.charCodeAt(i+1),0):i+1==H.length?r+u(H.charCodeAt(i),0,0):r+u(H.charCodeAt(i),H.charCodeAt(i+1),H.charCodeAt(i+2));return r}(Graph.arrayBufferToString(pako.deflateRaw(d))),!0);"txt"!=g&&(B.responseType="blob");B.onload=function(H){if(200<=this.status&&300>this.status)if("txt"==g)n(this.response);else{var L=new FileReader;L.readAsDataURL(this.response);L.onloadend=function(G){var T=
new Image;T.onload=function(){try{var p=T.width,q=T.height;if(0==p&&0==q){var C=L.result,J=C.indexOf(","),F=decodeURIComponent(escape(atob(C.substring(J+1)))),O=mxUtils.parseXml(F).getElementsByTagName("svg");0<O.length&&(p=parseFloat(O[0].getAttribute("width")),q=parseFloat(O[0].getAttribute("height")))}n(L.result,p,q)}catch(S){t(S)}};T.src=L.result};L.onerror=function(G){t(G)}}else t(H)};B.onerror=function(H){t(H)};B.send()};EditorUi.prototype.insertAsPreText=function(d,g,n){var t=this.editor.graph,