Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d.appendChild(f));D.appendChild(d);D.appendChild(g);this.container=D},FindWindow=function(b,e,f,c,k,l){function x(R,m,A,M){if("object"===typeof m.value&&null!=m.value.attributes){m=m.value.attributes;for(var Q=0;Q<m.length;Q++)if("label"!=m[Q].nodeName){var U=mxUtils.trim(m[Q].nodeValue.replace(/[\x00-\x1F\x7F-\x9F]|\s+/g," ")).toLowerCase();if(null==R&&(M&&0<=U.indexOf(A)||!M&&U.substring(0,A.length)===A)||null!=R&&R.test(U))return!0}}return!1}function y(){d?(O.removeAttribute("disabled"),S.removeAttribute("disabled")):
(O.setAttribute("disabled","disabled"),S.setAttribute("disabled","disabled"));H.value?K.removeAttribute("disabled"):K.setAttribute("disabled","disabled")}function E(R,m,A){J.innerText="";var M=z.model.getDescendants(z.model.getRoot()),Q=H.value.toLowerCase(),U=G.checked?new RegExp(Q):null,W=null;n=null;N!=Q&&(N=Q,I=null,g=!1);var P=null==I;if(0<Q.length){if(g){g=!1;for(var V,X=0;X<b.pages.length;X++)if(b.currentPage==b.pages[X]){V=X;break}R=(V+1)%b.pages.length;I=null;do g=!1,M=b.pages[R],z=b.createTemporaryGraph(z.getStylesheet()),