Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.loadImage(Y.target.result,mxUtils.bind(this,function(fa){this.resizeImage(fa,Y.target.result,mxUtils.bind(this,function(qa,ia,ya){U(Q,mxUtils.bind(this,function(){if(null!=qa&&qa.length<F){var xa=J&&this.isResampleImageSize(V.size,S)?Math.min(1,Math.min(t/ia,t/ya)):1;return u(qa,V.type,g+Q*m,n+Q*m,Math.round(ia*xa),Math.round(ya*xa),V.name)}this.handleError({message:mxResources.get("imageTooBig")});return null}))}),J,t,S,V.size)}),mxUtils.bind(this,function(){this.handleError({message:mxResources.get("invalidOrMissingFile")})})))}else Z=