Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
":",B.data,function(N){null!=N&&d.spinner.spin(document.body,mxResources.get("inserting"))&&d.generatePlantUmlImage(N,B.format,function(Z,U,aa){d.spinner.stop();f.getModel().beginUpdate();try{if("txt"==B.format)f.labelChanged(P,"<pre>"+Z+"</pre>"),f.updateCellSize(P,!0);else{f.setCellStyles("image",d.convertDataUri(Z),[P]);var Y=f.model.getGeometry(P);null!=Y&&(Y=Y.clone(),Y.width=U,Y.height=aa,f.cellsResized([P],[Y],!1))}f.setAttributeForCell(P,"plantUmlData",JSON.stringify({data:N,format:B.format}))}finally{f.getModel().endUpdate()}},