Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.commentsWindow.window.setVisible(l);this.commentsWindow.refreshCommentsTime();l&&this.commentsWindow.hasError&&this.commentsWindow.refreshComments()}}));B.setToggleAction(!0);B.setSelectedCallback(mxUtils.bind(this,function(){return null!=this.commentsWindow&&this.commentsWindow.window.isVisible()}));c.editor.addListener("fileLoaded",mxUtils.bind(this,function(){null!=this.commentsWindow&&(this.commentsWindow.destroy(),this.commentsWindow=null)}));this.get("viewPanels").funct=function(l,y){var J=
c.getCurrentFile();c.menus.addMenuItems(l,"toggleShapes format ruler - findReplace layers tags outline -".split(" "),y);c.commentsSupported()&&c.menus.addMenuItems(l,["comments"],y);null!=J&&J.isRealtimeEnabled()&&J.isRealtimeSupported()&&c.menus.addMenuItems(l,["showRemoteCursors"],y);c.menus.addMenuItems(l,["-","fullscreen"],y)};this.put("view",new Menu(mxUtils.bind(this,function(l,y){if("simple"==Editor.currentTheme){var J=c.getCurrentFile();c.menus.addMenuItems(l,["toggleShapes","format"],y);