Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
":",B.data,function(N){null!=N&&d.spinner.spin(document.body,mxResources.get("inserting"))&&d.generatePlantUmlImage(N,B.format,function(Z,U,aa){d.spinner.stop();f.getModel().beginUpdate();try{if("txt"==B.format)f.labelChanged(P,"<pre>"+Z+"</pre>"),f.updateCellSize(P,!0);else{f.setCellStyles("image",d.convertDataUri(Z),[P]);var Y=f.model.getGeometry(P);null!=Y&&(Y=Y.clone(),Y.width=U,Y.height=aa,f.cellsResized([P],[Y],!1))}f.setAttributeForCell(P,"plantUmlData",JSON.stringify({data:N,format:B.format}))}finally{f.getModel().endUpdate()}},
function(Z){d.handleError(Z)})},null,null,400,220);d.showDialog(V.container,420,300,!0,!0);V.init()};f.cellEditor.editMermaidData=function(P,V,l){var B=JSON.parse(l);V=new TextareaDialog(d,mxResources.get("mermaid")+":",B.data,function(N){null!=N&&d.spinner.spin(document.body,mxResources.get("inserting"))&&d.generateMermaidImage(N,B.config,function(Z,U,aa){d.spinner.stop();f.getModel().beginUpdate();try{f.setCellStyles("image",Z,[P]);var Y=f.model.getGeometry(P);null!=Y&&(Y=Y.clone(),Y.width=Math.max(Y.width,