Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CommentsWindow=function(b,f,m,d,u,v){function D(){for(var n=t.getElementsByTagName("div"),z=0,E=0;E<n.length;E++)"none"!=n[E].style.display&&n[E].parentNode==t&&z++;x.style.display=0==z?"block":"none"}function F(n,z,E,A){function N(){z.removeChild(U);z.removeChild(g);L.style.display="block";Q.style.display="block"}k={div:z,comment:n,saveCallback:E,deleteOnCancel:A};var Q=z.querySelector(".geCommentTxt"),L=z.querySelector(".geCommentActionsList"),U=document.createElement("textarea");U.className=