Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
H.freehand){var ma=H.freehand.createStyle;H.freehand.createStyle=function(ka){return ma.apply(this,arguments)+"sketch=0;"}}A.editor.addListener("statusChanged",mxUtils.bind(this,function(){A.setStatusText(A.editor.getStatus())}));A.setStatusText(A.editor.getStatus());var ba=A.menus.get("viewZoom");if(null!=ba){var S=function(ka){if(mxEvent.isAltDown(ka))A.hideCurrentMenu(),A.actions.get("customZoom").funct(),mxEvent.consume(ka);else if("geMenuItem"==mxEvent.getSource(ka).className||mxEvent.isShiftDown(ka))A.hideCurrentMenu(),
A.actions.get("smartFit").funct(),mxEvent.consume(ka)},da=A.actions.get("zoomIn"),P=A.actions.get("zoomOut"),V=A.actions.get("resetView"),l=A.actions.get("undo"),B=A.actions.get("redo"),N=d("",l.funct,null,mxResources.get("undo")+" ("+l.shortcut+")",l,Editor.undoImage),Z=d("",B.funct,null,mxResources.get("redo")+" ("+B.shortcut+")",B,Editor.redoImage),U=d("",S,!0,mxResources.get("fit")+" ("+Editor.ctrlKey+"+H)",V,Editor.zoomFitImage);J.style.cssText="position:absolute;left:0px;right:0px;top:0px;height:30px;padding:8px;text-align:left;white-space:nowrap;";