Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.fastCompress=function(l){return null==l||0==l.length||"undefined"===typeof pako?l:Graph.arrayBufferToString(pako.deflateRaw(l))};Editor.fastDecompress=function(l){return null==l||0==l.length||"undefined"===typeof pako?l:pako.inflateRaw(Graph.stringToArrayBuffer(atob(l)),{to:"string"})};Editor.extractGraphModel=function(l,B,N){if(null!=l&&"undefined"!==typeof pako){var Z=l.ownerDocument.getElementsByTagName("div"),U=[];if(null!=Z&&0<Z.length)for(var aa=0;aa<Z.length;aa++)if("mxgraph"==Z[aa].getAttribute("class")){U.push(Z[aa]);