Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
X||(ea.style.backgroundImage="url("+mxWindow.prototype.normalizeImage+")",ea.style.backgroundPosition="right 6px center",ea.style.backgroundRepeat="no-repeat",ea.style.paddingRight="22px");return ea}function c(W,X,Z,Y,ea,fa){var na=document.createElement("a");na.className="geMenuItem";na.style.display="inline-block";na.style.boxSizing="border-box";na.style.height="30px";na.style.padding="6px";na.style.position="relative";na.style.verticalAlign="top";na.style.top="0px";null!=t.statusContainer?C.insertBefore(na,
t.statusContainer):C.appendChild(na);null!=fa?(na.style.backgroundImage="url("+fa+")",na.style.backgroundPosition="center center",na.style.backgroundRepeat="no-repeat",na.style.backgroundSize="24px 24px",na.style.width="34px"):mxUtils.write(na,W);mxEvent.addListener(na,mxClient.IS_POINTER?"pointerdown":"mousedown",mxUtils.bind(this,function(da){da.preventDefault()}));mxEvent.addListener(na,"click",function(da){"disabled"!=na.getAttribute("disabled")&&X(da);mxEvent.consume(da)});null==Z&&(na.style.marginRight=
"4px");null!=Y&&na.setAttribute("title",Y);null!=ea&&(W=function(){ea.isEnabled()?(na.removeAttribute("disabled"),na.style.cursor="pointer"):(na.setAttribute("disabled","disabled"),na.style.cursor="default")},ea.addListener("stateChanged",W),x.addListener("enabledChanged",W),W());return na}function e(W,X,Z){Z=document.createElement("div");Z.className="geMenuItem";Z.style.display="inline-block";Z.style.verticalAlign="top";Z.style.marginRight="6px";Z.style.padding="0 4px 0 4px";Z.style.height="30px";