Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f.handleFileError(null,!0):this.spinner.spin(document.body,mxResources.get("updatingDocument"))&&(f.clearAutosave(),this.editor.setStatus(""),d?f.reloadFile(mxUtils.bind(this,function(){f.handleFileSuccess("manual"==DrawioFile.SYNC)}),mxUtils.bind(this,function(k){f.handleFileError(k,!0)})):f.synchronizeFile(mxUtils.bind(this,function(){f.handleFileSuccess("manual"==DrawioFile.SYNC)}),mxUtils.bind(this,function(k){f.handleFileError(k,!0)}))))};EditorUi.prototype.getFileData=function(d,f,k,v,z,A,H,
J,O,G,ja){z=null!=z?z:!0;A=null!=A?A:!1;G=null!=G?G:!Editor.defaultCompressed;var fa=this.editor.graph;if(f||!d&&null!=O&&/(\.svg)$/i.test(O.getTitle())){var ca=null!=fa.themes&&"darkTheme"==fa.defaultThemeName;if(ca||null!=this.pages&&this.currentPage!=this.pages[0]){var ia=fa.getGlobalVariable;fa=this.createTemporaryGraph(ca?fa.getDefaultStylesheet():fa.getStylesheet());fa.setBackgroundImage=this.editor.graph.setBackgroundImage;fa.background=this.editor.graph.background;var ma=null!=this.pages?
this.pages[0]:null;null==ma||this.currentPage==ma?fa.setBackgroundImage(this.editor.graph.backgroundImage):null!=ma.viewState&&null!=ma.viewState&&fa.setBackgroundImage(ma.viewState.backgroundImage);fa.getGlobalVariable=function(ba){return"page"==ba&&null!=ma?ma.getName():"pagenumber"==ba?1:ia.apply(this,arguments)};document.body.appendChild(fa.container);null!=ma&&fa.model.setRoot(ma.root)}}H=null!=H?H:this.getXmlFileData(z,A,G,ja);O=null!=O?O:this.getCurrentFile();d=this.createFileData(H,fa,O,window.location.href,
d,f,k,v,z,J,G);fa!=this.editor.graph&&fa.container.parentNode.removeChild(fa.container);return d};EditorUi.prototype.getHtml=function(d,f,k,v,z,A){A=null!=A?A:!0;var H=null,J=EditorUi.drawHost+"/js/embed-static.min.js";if(null!=f){H=A?f.getGraphBounds():f.getBoundingBox(f.getSelectionCells());var O=f.view.scale;A=Math.floor(H.x/O-f.view.translate.x);O=Math.floor(H.y/O-f.view.translate.y);H=f.background;null==z&&(f=this.getBasenames().join(";"),0<f.length&&(J=EditorUi.drawHost+"/embed.js?s="+f));d.setAttribute("x0",