Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
preview:aa.getAttribute("preview"),clibs:ha,tags:aa.getAttribute("tags")};ja.push(ha);null!=ma&&(ja=va[oa],null==ja&&(ja={},va[oa]=ja),oa=ja[ma],null==oa&&(oa=[],ja[ma]=oa),oa.push(ha))}aa=aa.nextSibling}L.stop();l()}})};z.appendChild(qa);z.appendChild(wa);z.appendChild(ca);var Ua=!1,ia=G;/^https?:\/\//.test(ia)&&!b.editor.isCorsEnabledForUrl(ia)&&(ia=PROXY_URL+"?url="+encodeURIComponent(ia));L.spin(ca);null!=q?q(function(aa,la){Ea=aa;W=Da=la;Va()},Va):Va();R=ua}mxEvent.addListener(N,"keypress",function(aa){b.dialog.container.firstChild==