Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
xa.length;sa<Ma;sa++)xa.push(oa);xa=xa.join(",");wa.setCellStyles(x.dependentProps[Da],xa,wa.getSelectionCells());Q.push(x.dependentProps[Da]);X.push(xa)}if("function"==typeof x.onChange)x.onChange(wa,Ma);pa.editorUi.fireEvent(new mxEventObject("styleChanged","keys",Q,"values",X,"cells",wa.getSelectionCells()))}finally{wa.getModel().endUpdate()}}function U(Da,Ma,x){var L=mxUtils.getOffset(l,!0),Q=mxUtils.getOffset(Da,!0);Ma.style.position="absolute";Ma.style.left=Q.x-L.x+"px";Ma.style.top=Q.y-L.y+