Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"undefined"!==typeof window.mxUtilsBinaryToArray){pa=mxUtilsBinaryToArray(pa.request.responseBody).toArray();wa=Array(pa.length);for(var Ca=0;Ca<pa.length;Ca++)wa[Ca]=String.fromCharCode(pa[Ca]);wa=wa.join("")}aa=null!=aa?aa:"data:image/png;base64,";wa=aa+Editor.base64Encode(wa)}B(wa)}}else null!=N&&(0==pa.getStatus()?N({message:mxResources.get("accessDenied")},pa):404==pa.getStatus()?N({code:pa.getStatus()},pa):N({message:mxResources.get("error")+" "+pa.getStatus()},pa))}),function(pa){null!=N&&