Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(fa){"true"!=W.getAttribute("contentEditable")&&mxEvent.consume(fa)});V=function(fa){if(mxClient.IS_IOS||mxClient.IS_FF||!(null==document.documentMode||9<document.documentMode)){var na=new FilenameDialog(b,X.title||"",mxResources.get("ok"),function(da){null!=da&&(X.title=da,U())},mxResources.get("enterValue"));b.showDialog(na.container,300,80,!0,!0);na.init();mxEvent.consume(fa)}else if("true"!=W.getAttribute("contentEditable")){null!=t&&(t(),t=null);if(null==X.title||0==X.title.length)W.innerText=
"";W.style.textOverflow="";W.style.whiteSpace="";W.style.cursor="text";W.style.color="";W.setAttribute("contentEditable","true");mxUtils.setPrefixedStyle(W.style,"user-select","text");W.focus();document.execCommand("selectAll",!1,null);t=function(){W.removeAttribute("contentEditable");W.style.cursor="pointer";X.title=W.innerHTML;U()};mxEvent.consume(fa)}};mxEvent.addListener(W,"click",V);mxEvent.addListener(O,"dblclick",V);c.appendChild(O);mxEvent.addListener(O,"dragstart",function(fa){null==T&&null!=