Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.prototype.isExportToCanvas=function(){return mxClient.IS_CHROMEAPP||this.useCanvasForExport};Editor.prototype.getMaxCanvasScale=function(m,A,M){var Q=mxClient.IS_FF?8192:16384;return Math.min(M,Math.min(Q/m,Q/A))};Editor.prototype.exportToCanvas=function(m,A,M,Q,U,W,P,V,X,Y,Z,da,ba,ma,ea,za,Ba,Ca){try{W=null!=W?W:!0;P=null!=P?P:!0;da=null!=da?da:this.graph;ba=null!=ba?ba:0;var ca=X?null:da.background;ca==mxConstants.NONE&&(ca=null);null==ca&&(ca=Q);null==ca&&0==X&&(ca=za?this.graph.defaultPageBackgroundColor: