Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
isDeletable:!0,defVal:L,countProperty:Q};xa=ra(Da,"",sa,0==xa%2,ea);Z(Da,L,sa);oa.parentNode.insertBefore(xa,oa.nextSibling);mxEvent.consume(la)}));btn.style.height="16px";btn.style.width="25px";btn.className="geColorBtn";return btn}function ka(Da,Ma,x,L,Q,X,ea){if(0<Q){var la=Array(Q);Ma=null!=Ma?Ma.split(","):[];for(var oa=0;oa<Q;oa++)la[oa]=null!=Ma[oa]?Ma[oa]:null!=L?L:"";Ca.push({name:Da,values:la,type:x,defVal:L,parentRow:X,flipBkg:ea,size:Q})}return document.createElement("div")}function qa(Da,
Ma,x){var L=document.createElement("input");L.type="checkbox";L.checked="1"==Ma;mxEvent.addListener(L,"change",function(){Z(Da,L.checked?"1":"0",x)});return L}function ra(Da,Ma,x,L,Q){var X=x.dispName,ea=x.type,la=document.createElement("tr");la.className="gePropRow"+(Q?"Dark":"")+(L?"Alt":"")+" gePropNonHeaderRow";la.setAttribute("data-pName",Da);la.setAttribute("data-pValue",Ma);L=!1;null!=x.index&&(la.setAttribute("data-index",x.index),X=(null!=X?X:"")+"["+x.index+"]",L=!0);var oa=document.createElement("td");