Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Graph.prototype.setTableRowHeight=function(b,e,g){g=null!=g?g:!0;var p=this.getModel();p.beginUpdate();try{var y=this.getCellGeometry(b);if(null!=y){y=y.clone();y.height+=e;p.setGeometry(b,y);var q=p.getParent(b),E=p.getChildCells(q,!0);if(!g){var M=mxUtils.indexOf(E,b);if(M<E.length-1){var T=E[M+1],F=this.getCellGeometry(T);null!=F&&(F=F.clone(),F.y+=e,F.height-=e,p.setGeometry(T,F))}}var K=this.getCellGeometry(q);null!=K&&(g||(g=b==E[E.length-1]),g&&(K=K.clone(),K.height+=e,p.setGeometry(q,K)))}}finally{p.endUpdate()}};