Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L[0].parentNode;null!=L[0].firstChild;)Q.insertBefore(L[0].firstChild,L[0]);Q.removeChild(L[0])}break}}else document.execCommand("createlink",!1,mxUtils.trim(x))};Graph.prototype.isCellResizable=function(x){var L=mxGraph.prototype.isCellResizable.apply(this,arguments),Q=this.getCurrentCellStyle(x);return!this.isTableCell(x)&&!this.isTableRow(x)&&(L||"0"!=mxUtils.getValue(Q,mxConstants.STYLE_RESIZABLE,"1")&&"wrap"==Q[mxConstants.STYLE_WHITE_SPACE])};Graph.prototype.distributeCells=function(x,L,Q){null==