Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
{fill:"#ffcc99",stroke:"#36393d"},{fill:"#cce5ff",stroke:"#36393d"},{fill:"#ffff88",stroke:"#36393d"},{fill:"#cdeb8b",stroke:"#36393d"},{fill:"#ffcccc",stroke:"#36393d"}]];StyleFormatPanel.prototype.customColorSchemes=null;StyleFormatPanel.prototype.findCommonProperties=function(g,y,H){if(null!=y){var O=function(V){if(null!=V)if(H)for(var R=0;R<V.length;R++)y[V[R].name]=V[R];else for(var W in y){var X=!1;for(R=0;R<V.length;R++)if(V[R].name==W&&V[R].type==y[W].type){X=!0;break}X||delete y[W]}},P=this.editorUi.editor.graph.view.getState(g);
null!=P&&null!=P.shape&&(P.shape.commonCustomPropAdded||(P.shape.commonCustomPropAdded=!0,P.shape.customProperties=P.shape.customProperties||[],P.cell.vertex?Array.prototype.push.apply(P.shape.customProperties,Editor.commonVertexProperties):Array.prototype.push.apply(P.shape.customProperties,Editor.commonEdgeProperties)),O(P.shape.customProperties));g=g.getAttribute("customProperties");if(null!=g)try{O(JSON.parse(g))}catch(V){}}};var J=StyleFormatPanel.prototype.init;StyleFormatPanel.prototype.init=