Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,function(K,R){K=null!=g.backgroundImage?g.backgroundImage.originalSrc:null;if(null!=K){var m=K.indexOf(",");if(0<m)for(K=K.substring(m+1),R=R.getProperty("patches"),m=0;m<R.length;m++)if(null!=R[m][EditorUi.DIFF_UPDATE]&&null!=R[m][EditorUi.DIFF_UPDATE][K]||null!=R[m][EditorUi.DIFF_REMOVE]&&0<=mxUtils.indexOf(R[m][EditorUi.DIFF_REMOVE],K)){g.refreshBackgroundImage();break}}}));var v=g.getBackgroundImageObject;g.getBackgroundImageObject=function(K,R){var m=v.apply(this,arguments);
if(null!=m&&null!=m.originalSrc)if(!R)m={src:m.originalSrc};else if(R&&null!=this.themes&&"darkTheme"==this.defaultThemeName){var A=this.stylesheet,M=this.shapeForegroundColor,Q=this.shapeBackgroundColor;this.stylesheet=this.getDefaultStylesheet();this.shapeBackgroundColor="#ffffff";this.shapeForegroundColor="#000000";m=d.createImageForPageLink(m.originalSrc);this.shapeBackgroundColor=Q;this.shapeForegroundColor=M;this.stylesheet=A}return m};this.isOffline()||"undefined"===typeof window.EditDataDialog||