Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(Q){mxEvent.isConsumed(Q)||((mxEvent.isControlDown(Q)||mxClient.IS_MAC&&mxEvent.isMetaDown(Q))&&13==Q.keyCode?(M.click(),mxEvent.consume(Q)):27==Q.keyCode&&(A.click(),mxEvent.consume(Q)))}));M.focus();M.className="geCommentEditBtn gePrimaryBtn";m.appendChild(M);C.insertBefore(m,S);K.style.display="none";S.style.display="none";R.focus()}function E(q,C){C.innerText="";q=new Date(q.modifiedDate);var J=b.timeSince(q);null==J&&(J=mxResources.get("lessThanAMinute"));mxUtils.write(C,mxResources.get("timeAgo",
[J],"{1} ago"));C.setAttribute("title",q.toLocaleDateString()+" "+q.toLocaleTimeString())}function D(q){var C=document.createElement("img");C.className="geCommentBusyImg";C.src=IMAGE_PATH+"/spin.gif";q.appendChild(C);q.busyImg=C}function z(q){q.style.border="1px solid red";q.removeChild(q.busyImg)}function N(q){q.style.border="";q.removeChild(q.busyImg)}function I(q,C,J,F,O){function S(W,P,V){var X=document.createElement("li");X.className="geCommentAction";var Y=document.createElement("a");Y.className=