Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
{fill:"#ffcc99",stroke:"#36393d"},{fill:"#cce5ff",stroke:"#36393d"},{fill:"#ffff88",stroke:"#36393d"},{fill:"#cdeb8b",stroke:"#36393d"},{fill:"#ffcccc",stroke:"#36393d"}]];StyleFormatPanel.prototype.customColorSchemes=null;StyleFormatPanel.prototype.findCommonProperties=function(m,A,M){if(null!=A){var Q=function(W){if(null!=W)if(M)for(var P=0;P<W.length;P++)A[W[P].name]=W[P];else for(var V in A){var X=!1;for(P=0;P<W.length;P++)if(W[P].name==V&&W[P].type==A[V].type){X=!0;break}X||delete A[V]}},U=this.editorUi.editor.graph.view.getState(m);
null!=U&&null!=U.shape&&(U.shape.commonCustomPropAdded||(U.shape.commonCustomPropAdded=!0,U.shape.customProperties=U.shape.customProperties||[],U.cell.vertex?Array.prototype.push.apply(U.shape.customProperties,Editor.commonVertexProperties):Array.prototype.push.apply(U.shape.customProperties,Editor.commonEdgeProperties)),Q(U.shape.customProperties));m=m.getAttribute("customProperties");if(null!=m)try{Q(JSON.parse(m))}catch(W){}}};var I=StyleFormatPanel.prototype.init;StyleFormatPanel.prototype.init=