Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
urlParams["remote-selection"]){var P=null!=b.currentPage?b.currentPage.getId():null;if(null==P||null!=W.pageId&&W.pageId==P){m();for(m=0;m<W.removed.length;m++){var V=W.removed[m];if(null!=V){var X=U[V];delete U[V];null!=X&&X.destroy()}}for(m=0;m<W.added.length;m++)if(V=W.added[m],null!=V){var Y=z.model.getCell(V);null!=Y&&(U[V]=z.highlightCell(Y,g[M].color,6E4,70,3))}}}}e.file.fireEvent(new mxEventObject("realtimeMessage","message",K))}}catch(Z){null!=window.console&&console.warn(Z,K,R)}}function y(K,
R){if(!C&&SimplePeer.WEBRTC_SUPPORT){var m=new SimplePeer({initiator:R,config:{iceServers:[{urls:"stun:54.89.235.160:3478"}]}});m.on("signal",function(A){S("sendSignal",{to:K,from:H,signal:A})});m.on("error",function(A){delete L[K];EditorUi.debug("P2PCollab: p2p socket error",A);!q&&R&&m.destroyed&&v[K]&&(EditorUi.debug("P2PCollab: p2p socket reconnecting",K),y(K,!0))});m.on("connect",function(){delete L[K];null==G[K]||G[K].destroyed?(G[K]=m,v[K]=!0,EditorUi.debug("P2PCollab: p2p socket connected",
K)):(m.noP2PMapDel=!0,m.destroy(),EditorUi.debug("P2PCollab: p2p socket duplicate",K))});m.on("close",function(){m.noP2PMapDel||(EditorUi.debug("P2PCollab: p2p socket closed",K),D(u[K]),delete G[K])});m.on("data",x);return L[K]=m}}function E(K,R){D(R||u[K]);null!=K&&(delete u[K],v[K]=!1)}function D(K){var R=g[K];if(null!=R){var m=R.selection,A;for(A in m)null!=m[A]&&m[A].destroy();null!=R.cursor&&null!=R.cursor.parentNode&&R.cursor.parentNode.removeChild(R.cursor);clearTimeout(R.inactiveTO);delete g[K]}}