Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.isDarkMode()?{outBkgClr:Editor.darkColor,cornerClr:Editor.darkColor,strokeClr:"#505759",fontClr:"#BBBBBB",guideClr:"#0088cf"}:{outBkgClr:"#e8e9ed",cornerClr:"#fbfbfb",strokeClr:"#dadce0",fontClr:"#BBBBBB",guideClr:"#0000BB"};S.style[m?"borderRight":"borderBottom"]="0.5px solid "+G.strokeClr;S.style.borderLeft="0.5px solid "+G.strokeClr});this.updateStyle();b.diagramContainer.appendChild(S);mxEvent.disableContextMenu(S);this.editorUiRefresh=b.refresh;b.refresh=function(x){M.editorUiRefresh.apply(b,
arguments);u()};u();var J=document.createElement("canvas");J.width=S.offsetWidth;J.height=S.offsetHeight;S.style.overflow="hidden";J.style.position="relative";S.appendChild(J);var c=J.getContext("2d");this.ui=b;var e=b.editor.graph;this.graph=e;this.container=S;this.canvas=J;var k=function(x,C,I,B,T){x=Math.round(x);C=Math.round(C);I=Math.round(I);B=Math.round(B);c.beginPath();c.moveTo(x+.5,C+.5);c.lineTo(I+.5,B+.5);c.stroke();T&&(m?(c.save(),c.translate(x,C),c.rotate(-Math.PI/2),c.fillText(T,0,0),