Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.menubarContainer)),null!=this.buttonContainer&&(this.buttonContainer.style.display="",this.buttonContainer.style.padding="",this.menubar.container.appendChild(this.buttonContainer))};EditorUi.prototype.createMenu=function(d,g,n,t){n=null!=n?n:"geToolbarButton";var u=this.menus.get(d);t=this.menubar.addMenu(mxResources.get(d),u.funct,null,t);t.className=n;t.style.display="inline-block";t.style.cursor="pointer";t.style.height="24px";t.setAttribute("title",mxResources.get(d));this.menus.menuCreated(u,
t,n);null!=g&&(t.style.backgroundImage="url("+g+")",t.style.backgroundPosition="center center",t.style.backgroundRepeat="no-repeat",t.style.backgroundSize="100% 100%",t.style.width="24px",t.innerText="");return t};EditorUi.prototype.createToolbarButton=function(d,g,n,t){t=null!=t?t:24;var u=document.createElement("a");u.className="geToolbarButton geAdaptiveAsset";u.setAttribute("title",g);u.style.backgroundImage="url("+d+")";u.style.backgroundPosition="center center";u.style.backgroundRepeat="no-repeat";