Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
K=document.createElement("div");K.style.marginTop="6px";K.style.display="inline-block";K.style.width="140px";mxUtils.write(K,mxResources.get("siblingSpacing")+": ");S.appendChild(K);var Q=document.createElement("input");Q.type="number";Q.value=F;Q.style.width="200px";Q.style.boxSizing="border-box";S.appendChild(Q);mxEvent.addListener(Q,"change",function(){F=Q.value});K=mxUtils.button(mxResources.get("custom")+"...",function(){var U=[{layout:"mxOrgChartLayout",config:{branchOptimizer:parseInt(R.value),
parentChildSpacing:parseInt(M.value),siblingSpacing:parseInt(Q.value)}}];c.hideDialog();c.showCustomLayoutDialog(JSON.stringify(U,null,2))});K.className="geBtn";S=new CustomDialog(c,S,function(){null==C&&(C=2);c.loadOrgChartLayouts(O)},null,null,null,K);c.showDialog(S.container,355,140,!0,!0)},q,null,l());p.addSeparator(q);p.addItem(mxResources.get("parallels"),null,mxUtils.bind(this,function(){c.tryAndHandle(mxUtils.bind(this,function(){var C=new mxParallelEdgeLayout(k);C.checkOverlap=!0;c.prompt(mxResources.get("spacing"),
C.spacing,mxUtils.bind(this,function(J){c.tryAndHandle(mxUtils.bind(this,function(){C.spacing=J;c.executeLayout(function(){C.execute(k.getDefaultParent(),k.isSelectionEmpty()?null:k.getSelectionCells())},!1)}))}))}))}),q);p.addSeparator(q);c.menus.addMenuItem(p,"runLayout",q,null,null,mxResources.get("custom")+"...")};this.put("help",new Menu(mxUtils.bind(this,function(p,q){if(!mxClient.IS_CHROMEAPP&&c.isOffline())this.addMenuItems(p,["about"],q);else{var C=p.addItem("Search:",null,null,q,null,null,