Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Array.prototype.push.apply(U.shape.customProperties,Editor.commonEdgeProperties)),Z(U.shape.customProperties));l=l.getAttribute("customProperties");if(null!=l)try{Z(JSON.parse(l))}catch(aa){}}};var W=StyleFormatPanel.prototype.init;StyleFormatPanel.prototype.init=function(){var l=this.editorUi.getSelectionState();null!=this.defaultColorSchemes&&0<this.defaultColorSchemes.length&&"image"!=l.style.shape&&!l.containsLabel&&0<l.cells.length&&this.container.appendChild(this.addStyles(this.createPanel()));
W.apply(this,arguments);if(Editor.enableCustomProperties){for(var B={},N=l.vertices,Z=l.edges,U=0;U<N.length;U++)this.findCommonProperties(N[U],B,0==U);for(U=0;U<Z.length;U++)this.findCommonProperties(Z[U],B,0==N.length&&0==U);null!=Object.getOwnPropertyNames&&0<Object.getOwnPropertyNames(B).length&&this.container.appendChild(this.addProperties(this.createPanel(),B,l))}};var d=StyleFormatPanel.prototype.addStyleOps;StyleFormatPanel.prototype.addStyleOps=function(l){var B=this.editorUi.getSelectionState();