Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(l,B,N){if(null!=B){var Z=function(aa){if(null!=aa)if(N)for(var Y=0;Y<aa.length;Y++)B[aa[Y].name]=aa[Y];else for(var ka in B){var qa=!1;for(Y=0;Y<aa.length;Y++)if(aa[Y].name==ka&&aa[Y].type==B[ka].type){qa=!0;break}qa||delete B[ka]}},U=this.editorUi.editor.graph.view.getState(l);null!=U&&null!=U.shape&&(U.shape.commonCustomPropAdded||(U.shape.commonCustomPropAdded=!0,U.shape.customProperties=U.shape.customProperties||[],U.cell.vertex?Array.prototype.push.apply(U.shape.customProperties,Editor.commonVertexProperties):
Array.prototype.push.apply(U.shape.customProperties,Editor.commonEdgeProperties)),Z(U.shape.customProperties));l=l.getAttribute("customProperties");if(null!=l)try{Z(JSON.parse(l))}catch(aa){}}};var W=StyleFormatPanel.prototype.init;StyleFormatPanel.prototype.init=function(){var l=this.editorUi.getSelectionState();null!=this.defaultColorSchemes&&0<this.defaultColorSchemes.length&&"image"!=l.style.shape&&!l.containsLabel&&0<l.cells.length&&this.container.appendChild(this.addStyles(this.createPanel()));