Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
return Q};Editor.getDiagramNodeXml=function(m){var A=mxUtils.getTextContent(m),M=null;0<A.length?M=Graph.decompress(A):null!=m.firstChild&&(M=mxUtils.getXml(m.firstChild));return M};Editor.extractGraphModelFromPdf=function(m){m=m.substring(m.indexOf(",")+1);m=window.atob&&!mxClient.IS_SF?atob(m):Base64.decode(m,!0);if("%PDF-1.7"==m.substring(0,8)){var A=m.indexOf("EmbeddedFile");if(-1<A){var M=m.indexOf("stream",A)+9;if(0<m.substring(A,M).indexOf("application#2Fvnd.jgraph.mxfile"))return A=m.indexOf("endstream",