Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
za.className="gePropHeaderCell";var Ca=document.createElement("img");Ca.src=Sidebar.prototype.expandedImage;Ca.style.verticalAlign="middle";za.appendChild(Ca);mxUtils.write(za,mxResources.get("property"));da.style.cursor="pointer";var Ba=function(){var pa=na.querySelectorAll(".gePropNonHeaderRow");if(Y.editorUi.propertiesCollapsed){Ca.src=Sidebar.prototype.collapsedImage;var ua="none";for(var va=g.childNodes.length-1;0<=va;va--)try{var Ea=g.childNodes[va],Da=Ea.nodeName.toUpperCase();"INPUT"!=Da&&
"SELECT"!=Da||g.removeChild(Ea)}catch(Ta){}}else Ca.src=Sidebar.prototype.expandedImage,ua="";for(va=0;va<pa.length;va++)pa[va].style.display=ua};mxEvent.addListener(da,"click",function(){Y.editorUi.propertiesCollapsed=!Y.editorUi.propertiesCollapsed;Ba()});da.appendChild(za);za=document.createElement("th");za.className="gePropHeaderCell";za.innerHTML=mxResources.get("value");da.appendChild(za);na.appendChild(da);var ba=!1,ca=!1;da=null;1==H.vertices.length&&0==H.edges.length?da=H.vertices[0].id: