Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
fa));P--;0==P&&y(g)})):Z.setAttribute(W,ea)}else null!=Y&&Z.setAttribute(W,Y)}}catch(fa){}})(R[X])});H("image","xlink:href");H("img","src");0==P&&y(g)};Editor.base64Encode=function(g){for(var y="",H=0,O=g.length,P,V,R;H<O;){P=g.charCodeAt(H++)&255;if(H==O){y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(P>>2);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((P&3)<<4);y+="==";break}V=g.charCodeAt(H++);if(H==O){y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(P>>
2);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((P&3)<<4|(V&240)>>4);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((V&15)<<2);y+="=";break}R=g.charCodeAt(H++);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(P>>2);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((P&3)<<4|(V&240)>>4);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((V&15)<<2|(R&192)>>6);
y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(R&63)}return y};Editor.prototype.loadUrl=function(g,y,H,O,P,V,R,W){try{var X=!R&&(O||/(\.png)($|\?)/i.test(g)||/(\.jpe?g)($|\?)/i.test(g)||/(\.gif)($|\?)/i.test(g)||/(\.pdf)($|\?)/i.test(g));P=null!=P?P:!0;var Z=mxUtils.bind(this,function(){mxUtils.get(g,mxUtils.bind(this,function(Y){if(200<=Y.getStatus()&&299>=Y.getStatus()){if(null!=y){var ea=Y.getText();if(X){if((9==document.documentMode||10==document.documentMode)&&"undefined"!==