Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,function(L,U){L=null!=e.backgroundImage?e.backgroundImage.originalSrc:null;if(null!=L){var g=L.indexOf(",");if(0<g)for(L=L.substring(g+1),U=U.getProperty("patches"),g=0;g<U.length;g++)if(null!=U[g][EditorUi.DIFF_UPDATE]&&null!=U[g][EditorUi.DIFF_UPDATE][L]||null!=U[g][EditorUi.DIFF_REMOVE]&&0<=mxUtils.indexOf(U[g][EditorUi.DIFF_REMOVE],L)){e.refreshBackgroundImage();break}}}));var t=e.getBackgroundImageObject;e.getBackgroundImageObject=function(L,U){var g=t.apply(this,arguments);
if(null!=g&&null!=g.originalSrc)if(!U)g={src:g.originalSrc};else if(U&&null!=this.themes&&"darkTheme"==this.defaultThemeName){var y=this.stylesheet,H=this.shapeForegroundColor,O=this.shapeBackgroundColor;this.stylesheet=this.getDefaultStylesheet();this.shapeBackgroundColor="#ffffff";this.shapeForegroundColor="#000000";g=c.createImageForPageLink(g.originalSrc);this.shapeBackgroundColor=O;this.shapeForegroundColor=H;this.stylesheet=y}return g};this.isOffline()||"undefined"===typeof window.EditDataDialog||