Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"keydown",mxUtils.bind(this,function(Z){mxEvent.isConsumed(Z)||((mxEvent.isControlDown(Z)||mxClient.IS_MAC&&mxEvent.isMetaDown(Z))&&13==Z.keyCode?(N.click(),mxEvent.consume(Z)):27==Z.keyCode&&(B.click(),mxEvent.consume(Z)))}));N.focus();N.className="geCommentEditBtn gePrimaryBtn";l.appendChild(N);ia.insertBefore(l,da);P.style.display="none";da.style.display="none";V.focus()}function T(ca,ia){ia.innerText="";ca=new Date(ca.modifiedDate);var ma=b.timeSince(ca);null==ma&&(ma=mxResources.get("lessThanAMinute"));
mxUtils.write(ia,mxResources.get("timeAgo",[ma],"{1} ago"));ia.setAttribute("title",ca.toLocaleDateString()+" "+ca.toLocaleTimeString())}function F(ca){var ia=document.createElement("img");ia.className="geCommentBusyImg";ia.src=IMAGE_PATH+"/spin.gif";ca.appendChild(ia);ca.busyImg=ia}function K(ca){ca.style.border="1px solid red";ca.removeChild(ca.busyImg)}function R(ca){ca.style.border="";ca.removeChild(ca.busyImg)}function W(ca,ia,ma,ba,S){function da(aa,Y,ka){var qa=document.createElement("li");