Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
I.setAttribute("FromSheet",B(T.id)),I.setAttribute("FromCell","EndX"),I.setAttribute("ToSheet",B(T.target.id)),H.appendChild(I)));L.appendChild(N);K.restore();return L}function A(H,I,L,N){H.file(I,(N?"":'<?xml version="1.0" encoding="UTF-8" standalone="yes"?>')+mxUtils.getXml(L,"\n"))}function C(H,I,L,N){var Q=mxUtils.createXmlDocument(),ha=mxUtils.createXmlDocument(),V=z(Q,M.XMLNS,"Pages");V.setAttributeNS("http://www.w3.org/2000/xmlns/","xmlns",M.XMLNS);V.setAttributeNS("http://www.w3.org/2000/xmlns/",