Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
y.editor.graph.shadowId="lightboxDropShadow";Graph.prototype.shadowId=p;y.refresh=function(){};var q=mxUtils.bind(this,function(W){27==W.keyCode&&y.destroy()}),E=this.initialOverflow,M=y.destroy;y.destroy=function(){null==b&&(mxEvent.removeListener(document.documentElement,"keydown",q),document.body.removeChild(e),document.body.removeChild(g),document.body.style.overflow=E,GraphViewer.resizeSensorEnabled=!0,M.apply(this,arguments))};var T=y.editor.graph,F=T.container;F.style.overflow="hidden";this.lightboxChrome&&