Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.isDarkMode()?{outBkgClr:Editor.darkColor,cornerClr:Editor.darkColor,strokeClr:"#505759",fontClr:"#BBBBBB",guideClr:"#0088cf"}:{outBkgClr:"#e8e9ed",cornerClr:"#fbfbfb",strokeClr:"#dadce0",fontClr:"#BBBBBB",guideClr:"#0000BB"};N.style[f?"borderRight":"borderBottom"]="0.5px solid "+z.strokeClr;N.style.borderLeft="0.5px solid "+z.strokeClr});this.updateStyle();b.diagramContainer.appendChild(N);mxEvent.disableContextMenu(N);this.editorUiRefresh=b.refresh;b.refresh=function(B){D.editorUiRefresh.apply(b,
arguments);k()};k();var I=document.createElement("canvas");I.width=N.offsetWidth;I.height=N.offsetHeight;N.style.overflow="hidden";I.style.position="relative";N.appendChild(I);var d=I.getContext("2d");this.ui=b;var g=b.editor.graph;this.graph=g;this.container=N;this.canvas=I;var n=function(B,H,L,G,T){B=Math.round(B);H=Math.round(H);L=Math.round(L);G=Math.round(G);d.beginPath();d.moveTo(B+.5,H+.5);d.lineTo(L+.5,G+.5);d.stroke();T&&(f?(d.save(),d.translate(B,H),d.rotate(-Math.PI/2),d.fillText(T,0,0),