Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
l);mxEvent.addListener(this.container,"mousemove",l);mxEvent.addListener(this.container,"mouseleave",function(U){B=null});this.isMouseInsertPoint=function(){return null!=B};var N=this.getInsertPoint;this.getInsertPoint=function(){return null!=B?this.getPointForEvent(B):N.apply(this,arguments)};var Z=this.layoutManager.getLayout;this.layoutManager.getLayout=function(U){var aa=this.graph.getCellStyle(U);if(null!=aa&&"rack"==aa.childLayout){var Y=new mxStackLayout(this.graph,!1);Y.gridSize=null!=aa.rackUnitSize?
parseFloat(aa.rackUnitSize):"undefined"!==typeof mxRackContainer?mxRackContainer.unitSize:20;Y.marginLeft=aa.marginLeft||0;Y.marginRight=aa.marginRight||0;Y.marginTop=aa.marginTop||0;Y.marginBottom=aa.marginBottom||0;Y.allowGaps=aa.allowGaps||0;Y.horizontal="1"==mxUtils.getValue(aa,"horizontalRack","0");Y.resizeParent=!1;Y.fill=!0;return Y}return Z.apply(this,arguments)};this.updateGlobalUrlVariables()};var k=Graph.prototype.postProcessCellStyle;Graph.prototype.postProcessCellStyle=function(l,B){return Graph.processFontStyle(k.apply(this,