Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p.style.backgroundSize="100% 100%";p.style.display="inline-block";p.style.cursor="pointer";p.style.marginLeft="6px";p.style.width=q+"px";p.style.height=q+"px";null!=k&&(mxEvent.addListener(p,mxClient.IS_POINTER?"pointerdown":"mousedown",mxUtils.bind(this,function(t){t.preventDefault()})),mxEvent.addListener(p,"click",function(t){"disabled"!=p.getAttribute("disabled")&&k(t);mxEvent.consume(t)}));return p};EditorUi.prototype.createMenuItem=function(c,e,k){var q=this.actions.get(c),p=null!=q?q.funct:
null,t=this.createToolbarButton(e,mxResources.get(c)+(null!=q&&null!=q.shortcut?" ("+q.shortcut+")":""),p);null==q||k||(c=function(){q.isEnabled()?(t.removeAttribute("disabled"),t.style.cursor="pointer"):(t.setAttribute("disabled","disabled"),t.style.cursor="default");t.style.opacity=q.isEnabled()?"":"0.2"},this.editor.graph.addListener("enabledChanged",c),q.addListener("stateChanged",c),c());return t};EditorUi.prototype.createFormatWindow=function(){if(null==this.formatWindow){var c=Math.max(10,