Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Oa[Qa]);0<=Ta&&ka.splice(Ta,1)}}}}}var ta=l.isEdge(Y);U=ta?N:B;var Aa=l.getStyle(Y);for(pa=0;pa<ka.length;pa++){Ba=ka[pa];var Ea=U[Ba];null!=Ea&&"edgeStyle"!=Ba&&("shape"!=Ba||ta)&&(!ta||Z||0>mxUtils.indexOf(T,Ba))&&(Aa=mxUtils.setStyle(Aa,Ba,Ea))}Editor.simpleLabels&&(Aa=mxUtils.setStyle(mxUtils.setStyle(Aa,"html",null),"whiteSpace",null));l.setStyle(Y,Aa)}}finally{l.endUpdate()}return P};y.addListener("cellsInserted",function(P,V){f(V.getProperty("cells"),null,null,null,null,!0,!0)});y.addListener("textInserted",