Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.htmlEntities(mxResources.get("error")+(ma&&ma.message?": "+ma.message:""));this.hasError=!0})):A.innerHTML=mxUtils.htmlEntities(mxResources.get("error"))});fa();this.refreshComments=fa;J=mxUtils.bind(this,function(){function ca(da){var P=ma[da.id];if(null!=P)for(T(da,P),P=0;null!=da.replies&&P<da.replies.length;P++)ca(da.replies[P])}if(this.window.isVisible()){for(var ia=A.querySelectorAll(".geCommentDate"),ma={},ba=0;ba<ia.length;ba++){var S=ia[ba];ma[S.getAttribute("data-commentId")]=S}for(ba=