Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
k.model.isVertex(l)&&k.isAutoSizeCell(l)&&k.updateCellSize(l)}finally{k.getModel().endUpdate()}k.scrollCellToVisible(l);k.setSelectionCell(l);k.container.focus();k.editAfterInsert&&k.startEditing(l);window.setTimeout(function(){null!=c.hoverIcons&&c.hoverIcons.update(k.view.getState(l))},0);return l},R=function(l,y,J,G,P){l=new mxCell(l,new mxGeometry(0,0,y,J),G);l.vertex=!0;null==P&&(P=k.getCenterInsertPoint(k.getBoundingBoxFromGeometry([l],!0)));l.geometry.x=P.x;l.geometry.y=P.y;return V(l)};c.actions.put("insertText",