Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"";this.bottomResizer.style.visibility="hidden";this.rightResizer.style.visibility="hidden";e.style.visibility="hidden";c.style.visibility="hidden";k.style.display="none"}));this.windowResized=mxUtils.bind(this,function(){});this.inlineSizeChanged()};EditorUi.prototype.installImagePasteHandler=function(){if(!mxClient.IS_IE){var c=this.editor.graph;c.container.addEventListener("paste",mxUtils.bind(this,function(e){if(!mxEvent.isConsumed(e))try{for(var k=e.clipboardData||e.originalEvent.clipboardData,
q=!1,p=0;p<k.types.length;p++)if("text/"===k.types[p].substring(0,5)){q=!0;break}if(!q){var t=k.items;for(index in t){var x=t[index];if("file"===x.kind){if(c.isEditing())this.importFiles([x.getAsFile()],0,0,this.maxImageSize,function(I,B,T,l,n,z){c.insertImage(I,n,z)},function(){},function(I){return"image/"==I.type.substring(0,6)},function(I){for(var B=0;B<I.length;B++)I[B]()});else{var C=this.editor.graph.getInsertPoint();this.importFiles([x.getAsFile()],C.x,C.y,this.maxImageSize);mxEvent.consume(e)}break}}}}catch(I){}}),
!1)}};EditorUi.prototype.installNativeClipboardHandler=function(){function c(){window.setTimeout(function(){k.innerHTML="&nbsp;";k.focus();document.execCommand("selectAll",!1,null)},0)}var e=this.editor.graph,k=document.createElement("div");k.setAttribute("autocomplete","off");k.setAttribute("autocorrect","off");k.setAttribute("autocapitalize","off");k.setAttribute("spellcheck","false");k.style.textRendering="optimizeSpeed";k.style.fontFamily="monospace";k.style.wordBreak="break-all";k.style.background=