Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.formatWindow.window.toggleMinimized()}));this.formatWindow.window.minimumSize=new mxRectangle(0,0,240,80);"sketch"==Editor.currentTheme?(c=window.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,(1200>(window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth)||708>c)&&this.formatWindow.window.toggleMinimized()):this.formatWindow.window.setVisible(!1)}};var F=EditorUi.prototype.toggleFormatPanel;EditorUi.prototype.toggleFormatPanel=function(c){var e=
this.formatWindow;null!=e?e.window.setVisible(null!=c?c:!this.isFormatPanelVisible()):F.apply(this,arguments)};EditorUi.prototype.toggleShapesPanel=function(c){var e=EditorUi.prototype.hsplitPosition;0==e&&(e=134);var k=this.hsplitPosition,q=mxUtils.bind(this,function(){this.hsplitPosition=p;this.refresh();this.diagramContainer.scrollLeft-=k-this.hsplitPosition}),p=c?e:0;mxUtils.setPrefixedStyle(this.sidebarContainer.style,"transform",0==p?"translateX(0)":"translateX(-100%)");0!=p&&q();window.setTimeout(mxUtils.bind(this,