Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"none",d.style.display="none");var t=document.createElement("option"),u=!1,v=!1,B=function(F,O){u||null!=F&&v||(N.checked?null!=O&&O(t.selected?null:d.value):""==I.value||b.isOffline()?(L.value="",G.value="",null!=O&&O("")):(I.value=mxUtils.trim(I.value),b.loadImage(I.value,function(S){L.value=S.width;G.value=S.height;null!=O&&O(I.value)},function(){b.showError(mxResources.get("error"),mxResources.get("fileNotFound"),mxResources.get("ok"));L.value="";G.value="";null!=O&&O(null)})))},H=mxUtils.bind(this,