Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
new FormData;I.append("img",H,R);I.append("inputformat","emf");I.append("outputformat","png");var L=new XMLHttpRequest;L.open("POST",EMF_CONVERT_URL);L.responseType="blob";f.editorUi.addRemoteServiceSecurityCheck(L);L.onreadystatechange=mxUtils.bind(this,function(){if(4==L.readyState)if(200<=L.status&&299>=L.status)try{var N=new FileReader;N.readAsDataURL(L.response);N.onloadend=function(){var Q=N.result.indexOf(",")+1;p[P]=N.result.substr(Q);A++;C()}}catch(Q){console.log(Q),A++,C()}else A++,C()});