Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"checked"):(J=parseInt(N[5]),x.value=J,q.setAttribute("checked","checked"),t.style.visibility="visible"):k.setAttribute("checked","checked")):m=null}else m=null}catch(P){}c.style=e+(m?m:u());c.vertex=!0;G.addCell(c,null,null,null,null);G.selectAll();G.addListener(mxEvent.CELLS_MOVED,B);G.addListener(mxEvent.CELLS_RESIZED,B);var y=G.graphHandler.mouseUp,H=G.graphHandler.mouseDown;G.graphHandler.mouseUp=function(){y.apply(this,arguments);M.style.backgroundColor="#fff9"};G.graphHandler.mouseDown=function(){H.apply(this,
arguments);M.style.backgroundColor=""};G.dblClick=function(){};var O=G.getSelectionModel().changeSelection;G.getSelectionModel().changeSelection=function(){O.call(this,[c],[c])}};K.onerror=function(){K.onload=null;K.src=Editor.errorImage};K.setAttribute("src",f);K.style.maxWidth="300px";K.style.maxHeight="300px";F.appendChild(K);D.appendChild(F);var M=document.createElement("div");M.style.width="300px";M.style.height="300px";M.style.overflow="hidden";M.style.backgroundColor="#fff9";D.appendChild(M);