Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
match.index+q.length}}O&&(t.push(e.substring(r)),D.setAttributeForCell(u,"label",t.join("")),D.setAttributeForCell(u,"placeholders","1"))}for(var aa in F)if(F.hasOwnProperty(aa)&&aa.toString().startsWith("ShapeData_"))try{var U=F[aa],wa=mxUtils.trim(U.Label).replace(/[^a-z0-9]+/ig,"_").replace(/^\d+/,"").replace(/_+$/,"");Za(u,wa,U.Value,D)}catch(ja){window.console&&console.log("Ignored "+aa+":",ja)}}function Za(u,F,D,t){for(var e=F,O=0;null!=t.getAttributeForCell(u,e);)O++,e=F+"_"+O;t.setAttributeForCell(u,
e,null!=D?D:"")}function yb(u,F,D,t,e,O){var r=h(F);if(null!=r){var q=Od[r.Class];null!=q?(u.style+=q,";"!=u.style.charAt(u.style.length-1)&&(u.style+=";")):u.edge||(console.log("No mapping found for: "+r.Class),LucidImporter.hasUnknownShapes=!0);q=null!=r.Properties?r.Properties:r;if(null!=q&&(u.value=O?"":m(q),u.style+=b(u.style,q,r,u,G,!0),u.style.includes("strokeColor")||(u.style+=I(q,r)),ka(u,q,D),q.Title&&q.Title.t&&q.Text&&q.Text.t&&"ExtShape"!=r.Class.substr(0,8)&&(D=u.geometry,D=new mxCell(m(q.Title),