Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d.appendChild(f));D.appendChild(d);D.appendChild(g);this.container=D},FindWindow=function(b,e,f,c,k,l){function x(R,m,A,M){if("object"===typeof m.value&&null!=m.value.attributes){m=m.value.attributes;for(var Q=0;Q<m.length;Q++)if("label"!=m[Q].nodeName){var U=mxUtils.trim(m[Q].nodeValue.replace(/[\x00-\x1F\x7F-\x9F]|\s+/g," ")).toLowerCase();if(null==R&&(M&&0<=U.indexOf(A)||!M&&U.substring(0,A.length)===A)||null!=R&&R.test(U))return!0}}return!1}function y(){d?(O.removeAttribute("disabled"),S.removeAttribute("disabled")):