Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
l();this.refreshComments=l;C=mxUtils.bind(this,function(){function n(Q){var L=E[Q.id];if(null!=L)for(K(Q,L),L=0;null!=Q.replies&&L<Q.replies.length;L++)n(Q.replies[L])}if(this.window.isVisible()){for(var z=t.querySelectorAll(".geCommentDate"),E={},A=0;A<z.length;A++){var N=z[A];E[N.getAttribute("data-commentId")]=N}for(A=0;A<T.length;A++)n(T[A])}});setInterval(C,6E4);this.refreshCommentsTime=C;this.window=new mxWindow(mxResources.get("comments"),q,f,m,d,u,!0,!0);this.window.minimumSize=new mxRectangle(0,