Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
na[da])&&fa.push(na[da]);this.setHiddenTags(fa);this.refresh()}0<ea.length&&(O++,this.executeAnimations(ea,W,Z?1:Y.steps,Z?0:Y.delay));0==O?X():R()}else this.stoppingCustomActions=this.executingCustomActions=!1,R(),null!=y&&y()});X()}};Graph.prototype.doUpdateCustomLinksForCell=function(g,y){var H=this.getLinkForCell(y);null!=H&&"data:action/json,"==H.substring(0,17)&&this.setLinkForCell(y,this.updateCustomLink(g,H));if(this.isHtmlLabel(y)){var O=document.createElement("div");O.innerHTML=Graph.sanitizeHtml(this.getLabel(y));
for(var P=O.getElementsByTagName("a"),V=!1,R=0;R<P.length;R++)H=P[R].getAttribute("href"),null!=H&&"data:action/json,"==H.substring(0,17)&&(P[R].setAttribute("href",this.updateCustomLink(g,H)),V=!0);V&&this.labelChanged(y,O.innerHTML)}};Graph.prototype.updateCustomLink=function(g,y){if("data:action/json,"==y.substring(0,17))try{var H=JSON.parse(y.substring(17));null!=H.actions&&(this.updateCustomLinkActions(g,H.actions),y="data:action/json,"+JSON.stringify(H))}catch(O){}return y};Graph.prototype.updateCustomLinkActions=