Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
if(null!=t.hoverIcons){var z=t.hoverIcons.update;t.hoverIcons.update=function(){x.freehand.isDrawing()||z.apply(this,arguments)}}if(null!=x.freehand){var E=x.freehand.createStyle;x.freehand.createStyle=function(W){return E.apply(this,arguments)+"sketch=0;"}}t.editor.addListener("statusChanged",mxUtils.bind(this,function(){t.setStatusText(t.editor.getStatus())}));t.setStatusText(t.editor.getStatus());var A=t.menus.get("viewZoom");if(null!=A){var N=function(W){if(mxEvent.isAltDown(W))t.hideCurrentMenu(),
t.actions.get("customZoom").funct(),mxEvent.consume(W);else if("geMenuItem"==mxEvent.getSource(W).className||mxEvent.isShiftDown(W))t.hideCurrentMenu(),t.actions.get("smartFit").funct(),mxEvent.consume(W)},Q=t.actions.get("zoomIn"),L=t.actions.get("zoomOut"),U=t.actions.get("resetView"),g=t.actions.get("undo"),y=t.actions.get("redo"),H=c("",g.funct,null,mxResources.get("undo")+" ("+g.shortcut+")",g,Editor.undoImage),O=c("",y.funct,null,mxResources.get("redo")+" ("+y.shortcut+")",y,Editor.redoImage),