Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N.substring(0,11)?d.loadImage(N,mxUtils.bind(this,function(O){var P=!0,V=mxUtils.bind(this,function(){d.resizeImage(O,N,mxUtils.bind(this,function(R,W,X){R=P?Math.min(1,Math.min(d.maxImageSize/W,d.maxImageSize/X)):1;d.importFile(N,Q,y,H,Math.round(W*R),Math.round(X*R),L,function(Z){d.spinner.stop();u.setSelectionCells(Z);u.scrollCellToVisible(u.getSelectionCell())})}),P)});N.length>d.resampleThreshold?d.confirmImageResize(function(R){P=R;V()}):V()}),mxUtils.bind(this,function(){d.handleError({message:mxResources.get("cannotOpenFile")})})):