Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"120px",G.style.backgroundImage="url('"+IMAGE_PATH+"/droptarget.png')",G.style.backgroundPosition="center 65%",G.style.backgroundRepeat="no-repeat",D=document.createElement("div"),D.style.position="absolute",D.style.width="420px",D.style.top="58%",D.style.textAlign="center",D.style.fontSize="18px",D.style.color="#a0c3ff",mxUtils.write(D,mxResources.get("dragImagesHere")),G.appendChild(D));G.appendChild(F);this.container=G},LinkDialog=function(b,f,m,d,u,v,D){function F(x,C,I){I=mxUtils.button("",I);
I.className="geBtn";I.setAttribute("title",C);C=document.createElement("img");C.style.height="26px";C.style.width="26px";C.setAttribute("src",x);I.style.minWidth="42px";I.style.verticalAlign="middle";I.appendChild(C);t.appendChild(I)}var K=document.createElement("div");K.style.height="100%";mxUtils.write(K,mxResources.get("editLink")+":");var M=document.createElement("div");M.className="geTitle";M.style.backgroundColor="transparent";M.style.borderColor="transparent";M.style.whiteSpace="nowrap";M.style.textOverflow=