Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CommentsWindow=function(b,e,f,c,k,l){function x(){for(var q=v.getElementsByTagName("div"),C=0,J=0;J<q.length;J++)"none"!=q[J].style.display&&q[J].parentNode==v&&C++;B.style.display=0==C?"block":"none"}function y(q,C,J,F){function O(){C.removeChild(R);C.removeChild(m);K.style.display="block";S.style.display="block"}n={div:C,comment:q,saveCallback:J,deleteOnCancel:F};var S=C.querySelector(".geCommentTxt"),K=C.querySelector(".geCommentActionsList"),R=document.createElement("textarea");R.className=