Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
EditorUi.prototype.createParentLookup=function(b,f){function m(M){var G=d[M];null==G&&(G={inserted:[],moved:{}},d[M]=G);return G}var d={};if(null!=f[EditorUi.DIFF_INSERT])for(var u=0;u<f[EditorUi.DIFF_INSERT].length;u++){var v=f[EditorUi.DIFF_INSERT][u],D=null!=v.parent?v.parent:"",F=null!=v.previous?v.previous:"";m(D).inserted[F]=v}if(null!=f[EditorUi.DIFF_UPDATE])for(var K in f[EditorUi.DIFF_UPDATE])v=f[EditorUi.DIFF_UPDATE][K],null!=v.previous&&(D=v.parent,null==D&&(u=b.getCell(K),null!=u&&(u=