Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var z=this.hoverIcons.isResetEvent;this.hoverIcons.isResetEvent=function(P,V){return p.isSpaceDown()||z.apply(this,arguments)};this.keydownHandler=mxUtils.bind(this,function(P){16==P.which?this.shiftDown=!0:32!=P.which||y.isEditing()?mxEvent.isConsumed(P)||27!=P.keyCode||this.hideDialog(null,!0):(this.spaceDown=!0,this.hoverIcons.reset(),y.container.style.cursor="move",y.isEditing()||mxEvent.getSource(P)!=y.container||mxEvent.consume(P))});mxEvent.addListener(document,"keydown",this.keydownHandler);