Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.loadImage(Z.target.result,mxUtils.bind(this,function(ca){this.resizeImage(ca,Z.target.result,mxUtils.bind(this,function(qa,ka,Aa){P(R,mxUtils.bind(this,function(){if(null!=qa&&qa.length<B){var xa=E&&this.isResampleImageSize(W.size,T)?Math.min(1,Math.min(q/ka,q/Aa)):1;return p(qa,W.type,e+R*g,k+R*g,Math.round(ka*xa),Math.round(Aa*xa),W.name)}this.handleError({message:mxResources.get("imageTooBig")});return null}))}),E,q,T,W.size)}),mxUtils.bind(this,function(){this.handleError({message:mxResources.get("invalidOrMissingFile")})})))}else Y=