Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CommentsWindow=function(b,e,g,p,y,q){function E(){for(var ca=A.getElementsByTagName("div"),ia=0,ma=0;ma<ca.length;ma++)"none"!=ca[ma].style.display&&ca[ma].parentNode==A&&ia++;H.style.display=0==ia?"block":"none"}function M(ca,ia,ma,ba){function S(){ia.removeChild(V);ia.removeChild(l);P.style.display="block";da.style.display="block"}k={div:ia,comment:ca,saveCallback:ma,deleteOnCancel:ba};var da=ia.querySelector(".geCommentTxt"),P=ia.querySelector(".geCommentActionsList"),V=document.createElement("textarea");
V.className="geCommentEditTxtArea";V.style.minHeight=da.offsetHeight+"px";V.value=ca.content;ia.insertBefore(V,da);var l=document.createElement("div");l.className="geCommentEditBtns";var B=mxUtils.button(mxResources.get("cancel"),function(){ba?(ia.parentNode.removeChild(ia),E()):S();k=null});B.className="geCommentEditBtn";l.appendChild(B);var N=mxUtils.button(mxResources.get("save"),function(){da.innerText="";ca.content=V.value;mxUtils.write(da,ca.content);S();ma(ca);k=null});mxEvent.addListener(V,
"keydown",mxUtils.bind(this,function(Z){mxEvent.isConsumed(Z)||((mxEvent.isControlDown(Z)||mxClient.IS_MAC&&mxEvent.isMetaDown(Z))&&13==Z.keyCode?(N.click(),mxEvent.consume(Z)):27==Z.keyCode&&(B.click(),mxEvent.consume(Z)))}));N.focus();N.className="geCommentEditBtn gePrimaryBtn";l.appendChild(N);ia.insertBefore(l,da);P.style.display="none";da.style.display="none";V.focus()}function T(ca,ia){ia.innerText="";ca=new Date(ca.modifiedDate);var ma=b.timeSince(ca);null==ma&&(ma=mxResources.get("lessThanAMinute"));