Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
EditorUi.prototype.repositionLibrary=function(c){var e=this.sidebar.getEntryContainer();if(null==c){var k=this.sidebar.palettes["L.scratchpad"];null==k&&(k=this.sidebar.palettes.search);null!=k&&(c=k[k.length-1].nextSibling)}c=null!=c?c:e.firstChild.nextSibling.nextSibling;k=e.lastChild;var q=k.previousSibling;e.insertBefore(k,c);e.insertBefore(q,k)};EditorUi.prototype.loadLibrary=function(c,e){var k=mxUtils.parseXml(c.getData());if("mxlibrary"==k.documentElement.nodeName){var q=JSON.parse(mxUtils.getTextContent(k.documentElement));