Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
B&&"function"===typeof B.substring&&(new XMLHttpRequest).upload&&this.isRemoteFileFormat(B,"")?this.isOffline()?this.showError(mxResources.get("error"),mxResources.get("notInOffline")):this.parseFileData(B,mxUtils.bind(this,function(ba){4==ba.readyState&&(200<=ba.status&&299>=ba.status&&"<mxGraphModel"==ba.responseText.substring(0,13)?Ba(ba.responseText,I):this.handleError({message:413==ba.status?mxResources.get("diagramTooLarge"):mxResources.get("unknownError")}))}),""):null!=B&&"function"===typeof B.substring&&
this.isLucidChartData(B)?this.convertLucidChart(B,mxUtils.bind(this,function(ba){Ba(ba)}),mxUtils.bind(this,function(ba){this.handleError(ba)})):null==B||"object"!==typeof B||null==B.format||null==B.data&&null==B.url?(B=l(B),Ba(B,I)):this.loadDescriptor(B,mxUtils.bind(this,function(ba){Ba(Ca(),I)}),mxUtils.bind(this,function(ba){this.handleError(ba,mxResources.get("errorLoadingFile"))}))}}));var x=window.opener||window.parent;t="json"==urlParams.proto?JSON.stringify({event:"init"}):urlParams.ready||