Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Q,[K]);var P=g.model.getGeometry(K);null!=P&&(P=P.clone(),P.width=Math.max(P.width,U),P.height=Math.max(P.height,W),g.cellsResized([K],[P],!1));g.setAttributeForCell(K,"mermaidData",JSON.stringify({data:M,config:A.config},null,2))}finally{g.getModel().endUpdate()}},function(Q){d.handleError(Q)})},null,null,400,220);d.showDialog(R.container,420,300,!0,!0);R.init()};var n=g.cellEditor.startEditing;g.cellEditor.startEditing=function(K,R){try{var m=this.graph.getAttributeForCell(K,"plantUmlData");if(null!=
m)this.editPlantUmlData(K,R,m);else if(m=this.graph.getAttributeForCell(K,"mermaidData"),null!=m)this.editMermaidData(K,R,m);else{var A=g.getCellStyle(K);"1"==mxUtils.getValue(A,"metaEdit","0")?d.showDataDialog(K):n.apply(this,arguments)}}catch(M){d.handleError(M)}};g.getLinkTitle=function(K){return d.getLinkTitle(K)};g.customLinkClicked=function(K){var R=!1;try{d.handleCustomLink(K),R=!0}catch(m){d.handleError(m)}return R};var t=g.parseBackgroundImage;g.parseBackgroundImage=function(K){var R=t.apply(this,