Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e&&e(n)}}),null,null,null,mxUtils.bind(this,function(T){null!=e&&e(T)}),null,null,q,null,t.shadowVisible,null,t,p,null,null,null,"diagram",null)}catch(T){null!=e&&e(T)}};EditorUi.prototype.getEmbeddedSvg=function(c,e,k,q,p,t,x,C,I,B,T,l,n){C=null!=C?C:!0;T=null!=T?T:0;x=null!=I?I:e.background;x==mxConstants.NONE&&(x=null);t=e.getSvg(x,B,T,null,null,t,null,null,null,e.shadowVisible||l,null,n,"diagram");(e.shadowVisible||l)&&e.addSvgShadow(t,null,null,0==T);null!=c&&t.setAttribute("content",c);null!=
k&&t.setAttribute("resource",k);var z=mxUtils.bind(this,function(E){E=(q?"":Graph.xmlDeclaration+"\n"+Graph.svgFileComment+"\n"+Graph.svgDoctype+"\n")+mxUtils.getXml(E);null!=p&&p(E);return E});e.mathEnabled&&this.editor.addMathCss(t);if(null!=p)this.embedFonts(t,mxUtils.bind(this,function(E){C?this.editor.convertImages(E,mxUtils.bind(this,function(A){z(A)})):z(E)}));else return z(t)};EditorUi.prototype.embedFonts=function(c,e){this.editor.loadFonts(mxUtils.bind(this,function(){try{null!=this.editor.resolvedFontCss&&