Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
k.div.cloneNode(!0);var ca=k.div.querySelector(".geCommentEditTxtArea"),ia=k.div.querySelector(".geCommentEditBtns");k.comment.content=ca.value;ca.parentNode.removeChild(ca);ia.parentNode.removeChild(ia)}catch(ma){b.handleError(ma)}A.innerHTML='<div style="padding-top:10px;text-align:center;"><img src="'+IMAGE_PATH+'/spin.gif" valign="middle"> '+mxUtils.htmlEntities(mxResources.get("loading"))+"...</div>";f=b.canReplyToReplies();b.commentsSupported()?b.getComments(function(ma){function ba(S){if(null!=
S){S.sort(function(P,V){return new Date(P.modifiedDate)-new Date(V.modifiedDate)});for(var da=0;da<S.length;da++)ba(S[da].replies)}}ma.sort(function(S,da){return new Date(S.modifiedDate)-new Date(da.modifiedDate)});A.innerText="";A.appendChild(H);H.style.display="block";ja=ma;for(ma=0;ma<ja.length;ma++)ba(ja[ma].replies),W(ja[ma],ja,null,0,G);null!=k&&null==k.comment.id&&null==k.comment.pCommentId&&(A.appendChild(k.div),M(k.comment,k.div,k.saveCallback,k.deleteOnCancel))},mxUtils.bind(this,function(ma){A.innerHTML=