Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.extractGraphModelFromXref(W));null!=M&&(M=decodeURIComponent(M.replace(/\\\(/g,"(").replace(/\\\)/g,")")));return M};Editor.extractGraphModelFromXref=function(m){var A=m.trailer,M=null;null!=A&&(A=/.* \/Info (\d+) (\d+) R/g.exec(A.join("\n")),null!=A&&0<A.length&&(A=m[A[1]],null!=A&&(A=/.* \/Subject (\d+) (\d+) R/g.exec(A.join("\n")),null!=A&&0<A.length&&(m=m[A[1]],null!=m&&(m=m.join("\n"),M=m.substring(1,m.length-1))))));return M};Editor.extractParserError=function(m,A){var M=null;m=null!=
m?m.getElementsByTagName("parsererror"):null;null!=m&&0<m.length&&(M=A||mxResources.get("invalidChars"),A=m[0].getElementsByTagName("div"),0<A.length&&(M=mxUtils.getTextContent(A[0])));return null!=M?mxUtils.trim(M):M};Editor.addRetryToError=function(m,A){null!=m&&(m=null!=m.error?m.error:m,null==m.retry&&(m.retry=A))};Editor.mermaidToDrawio=function(m,A,M){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(m,A,M)};Editor.configure=function(m){if(null!=m){Editor.config=m;Editor.configVersion=