Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(O){mxEvent.isConsumed(O)||((mxEvent.isControlDown(O)||mxClient.IS_MAC&&mxEvent.isMetaDown(O))&&13==O.keyCode?(H.click(),mxEvent.consume(O)):27==O.keyCode&&(y.click(),mxEvent.consume(O)))}));H.focus();H.className="geCommentEditBtn gePrimaryBtn";g.appendChild(H);z.insertBefore(g,Q);L.style.display="none";Q.style.display="none";U.focus()}function K(n,z){z.innerText="";n=new Date(n.modifiedDate);var E=b.timeSince(n);null==E&&(E=mxResources.get("lessThanAMinute"));mxUtils.write(z,mxResources.get("timeAgo",
[E],"{1} ago"));z.setAttribute("title",n.toLocaleDateString()+" "+n.toLocaleTimeString())}function M(n){var z=document.createElement("img");z.className="geCommentBusyImg";z.src=IMAGE_PATH+"/spin.gif";n.appendChild(z);n.busyImg=z}function G(n){n.style.border="1px solid red";n.removeChild(n.busyImg)}function S(n){n.style.border="";n.removeChild(n.busyImg)}function J(n,z,E,A,N){function Q(V,R,W){var X=document.createElement("li");X.className="geCommentAction";var Z=document.createElement("a");Z.className=