Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p();this.refreshComments=p;H=mxUtils.bind(this,function(){function q(S){var K=J[S.id];if(null!=K)for(E(S,K),K=0;null!=S.replies&&K<S.replies.length;K++)q(S.replies[K])}if(this.window.isVisible()){for(var C=v.querySelectorAll(".geCommentDate"),J={},F=0;F<C.length;F++){var O=C[F];J[O.getAttribute("data-commentId")]=O}for(F=0;F<T.length;F++)q(T[F])}});setInterval(H,6E4);this.refreshCommentsTime=H;this.window=new mxWindow(mxResources.get("comments"),t,e,f,c,k,!0,!0);this.window.minimumSize=new mxRectangle(0,