Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.styleInput.value)})),F.appendChild(this.styleInput),this.editor.graph.getSelectionModel().addListener(mxEvent.CHANGE,mxUtils.bind(this,function(K,R){0<this.editor.graph.getSelectionCount()?(K=this.editor.graph.getSelectionCell(),K=this.editor.graph.getModel().getStyle(K),this.styleInput.value=K||"",this.styleInput.style.visibility="visible"):this.styleInput.style.visibility="hidden"})));var O=this.isSelectionAllowed;this.isSelectionAllowed=function(K){return mxEvent.getSource(K)==this.styleInput?
!0:O.apply(this,arguments)}}F=document.getElementById("geInfo");null!=F&&F.parentNode.removeChild(F);if(Graph.fileSupport&&(!this.editor.chromeless||this.editor.editable)){var S=null;mxEvent.addListener(g.container,"dragleave",function(K){g.isEnabled()&&(null!=S&&(S.parentNode.removeChild(S),S=null),K.stopPropagation(),K.preventDefault())});mxEvent.addListener(g.container,"dragover",mxUtils.bind(this,function(K){null==S&&(!mxClient.IS_IE||10<document.documentMode)&&(S=this.highlightElement(g.container));