Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
BmpDecoder.prototype.bit24=function(){var g=3*this.width%4;0!=g&&(g=4-g);for(var y=this.height-1;0<=y;y--){for(var z=0;z<this.width;z++){var B=this.buffer[this.pos++],m=this.buffer[this.pos++],h=this.buffer[this.pos++],c=y*this.width*4+4*z;this.data[c]=h;this.data[c+1]=m;this.data[c+2]=B;this.data[c+3]=255}this.pos+=g}};