Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
f},ConnectionPointsDialog=function(b,f){function m(){null!=u&&u.destroy()}var d=document.createElement("div");d.style.userSelect="none";var u=null;this.init=function(){function v(E,A,N){E=new mxCell("",new mxGeometry(E,A,6,6),"shape=mxgraph.basic.x;fillColor=#29b6f2;strokeColor=#29b6f2;points=[];rotatable=0;resizable=0;connectable=0;editable=0;");E.vertex=!0;E.cp=!0;E.constObj=N;return S.addCell(E)}function D(E){E=S.getSelectionCells();S.deleteCells(E)}function F(){var E=parseInt(T.value)||0;E=0>