D.substring(0,11)){var K=D.indexOf(",");0<K&&(D=D.substring(0,K)+";base64,"+D.substring(K+1))}d(D,null,0,0,G,P);x.scrollTop=x.scrollHeight}})});p.setAttribute("id","btnAddImageUrl");p.className="geBtn";c.appendChild(p);this.saveBtnClickHandler=function(D,G,P,K){b.saveLibrary(D,G,P,K)};p=mxUtils.button(mxResources.get("save"),mxUtils.bind(this,function(){null!=O&&(O(),O=null);this.saveBtnClickHandler(q.value,l,m,n)}));p.setAttribute("id","btnSave");p.className="geBtn gePrimaryBtn";c.appendChild(p);
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.