Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
urlParams.thumb||null!=L.mimeType&&"application/vnd.jgraph.mxfile"!=L.mimeType.substring(0,29)||!this.ui.getThumbnail(this.thumbnailWidth,mxUtils.bind(this,function(T){try{var p=null;try{null!=T&&(p=T.toDataURL("image/png")),null!=p&&(p=p.length>this.maxThumbnailSize?null:p.substring(p.indexOf(",")+1).replace(/\+/g,"-").replace(/\//g,"_"))}catch(q){p=null}G(p,"image/png")}catch(q){d(q)}})))&&G(null,null,f.constructor!=DriveLibrary)}catch(T){d(T)}}else this.ui.editor.graph.reset(),I({message:mxResources.get("readOnly")})}catch(T){d(T)}};