Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
k,mxUtils.bind(this,function(Y,ca,fa){Y=X?Math.min(1,Math.min(d.maxImageSize/ca,d.maxImageSize/fa)):1;d.importFile(k,x,U,R,Math.round(ca*Y),Math.round(fa*Y),F,function(aa){d.spinner.stop();q.setSelectionCells(aa);q.scrollCellToVisible(q.getSelectionCell())})}),X)});k.length>d.resampleThreshold?d.confirmImageResize(function(Y){X=Y;Z()}):Z()}),mxUtils.bind(this,function(){d.handleError({message:mxResources.get("cannotOpenFile")})})):d.importFile(k,x,U,R,0,0,F,function(W){d.spinner.stop();q.setSelectionCells(W);