Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
for(var P=O.getElementsByTagName("a"),V=!1,R=0;R<P.length;R++)H=P[R].getAttribute("href"),null!=H&&"data:action/json,"==H.substring(0,17)&&(P[R].setAttribute("href",this.updateCustomLink(g,H)),V=!0);V&&this.labelChanged(y,O.innerHTML)}};Graph.prototype.updateCustomLink=function(g,y){if("data:action/json,"==y.substring(0,17))try{var H=JSON.parse(y.substring(17));null!=H.actions&&(this.updateCustomLinkActions(g,H.actions),y="data:action/json,"+JSON.stringify(H))}catch(O){}return y};Graph.prototype.updateCustomLinkActions=