Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Z.createElementNS(mxConstants.NS_SVG,"style"):Z.createElement("style");l.setAttribute("type","text/css");mxUtils.setTextContent(l,B);N.appendChild(l)}};Editor.prototype.isExportToCanvas=function(){return mxClient.IS_CHROMEAPP||this.useCanvasForExport};Editor.prototype.getMaxCanvasScale=function(l,B,N){var Z=mxClient.IS_FF?8192:16384;return Math.min(N,Math.min(Z/l,Z/B))};Editor.prototype.exportToCanvas=function(l,B,N,Z,U,aa,Y,ka,qa,ra,pa,wa,Ca,Ba,ya,Oa,Qa,Ta){try{aa=null!=aa?aa:!0;Y=null!=Y?Y:!0;wa=