Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
H&&y(Editor.svgBrokenImage.src)};P.src=g}}catch(V){y(Editor.svgBrokenImage.src)}};Editor.prototype.convertImages=function(g,y,H,O){null==O&&(O=this.createImageUrlConverter());var P=0,V=H||{};H=mxUtils.bind(this,function(R,W){R=g.getElementsByTagName(R);for(var X=0;X<R.length;X++)mxUtils.bind(this,function(Z){try{if(null!=Z){var Y=O.convert(Z.getAttribute(W));if(null!=Y&&"data:"!=Y.substring(0,5)){var ea=V[Y];null==ea?(P++,this.convertImageToDataUri(Y,function(fa){null!=fa&&(V[Y]=fa,Z.setAttribute(W,
fa));P--;0==P&&y(g)})):Z.setAttribute(W,ea)}else null!=Y&&Z.setAttribute(W,Y)}}catch(fa){}})(R[X])});H("image","xlink:href");H("img","src");0==P&&y(g)};Editor.base64Encode=function(g){for(var y="",H=0,O=g.length,P,V,R;H<O;){P=g.charCodeAt(H++)&255;if(H==O){y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(P>>2);y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((P&3)<<4);y+="==";break}V=g.charCodeAt(H++);if(H==O){y+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(P>>