Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.menubarContainer)),null!=this.buttonContainer&&(this.buttonContainer.style.display="",this.buttonContainer.style.padding="",this.menubar.container.appendChild(this.buttonContainer))};EditorUi.prototype.createMenu=function(c,e,k,q){k=null!=k?k:"geToolbarButton";var p=this.menus.get(c);q=this.menubar.addMenu(mxResources.get(c),p.funct,null,q);q.className=k;q.style.display="inline-block";q.style.cursor="pointer";q.style.height="24px";q.setAttribute("title",mxResources.get(c));this.menus.menuCreated(p,
q,k);null!=e&&(q.style.backgroundImage="url("+e+")",q.style.backgroundPosition="center center",q.style.backgroundRepeat="no-repeat",q.style.backgroundSize="100% 100%",q.style.width="24px",q.innerText="");return q};EditorUi.prototype.createToolbarButton=function(c,e,k,q){q=null!=q?q:24;var p=document.createElement("a");p.className="geToolbarButton geAdaptiveAsset";p.setAttribute("title",e);p.style.backgroundImage="url("+c+")";p.style.backgroundPosition="center center";p.style.backgroundRepeat="no-repeat";