Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"";this.bottomResizer.style.visibility="hidden";this.rightResizer.style.visibility="hidden";g.style.visibility="hidden";d.style.visibility="hidden";n.style.display="none"}));this.windowResized=mxUtils.bind(this,function(){});this.inlineSizeChanged()};EditorUi.prototype.installImagePasteHandler=function(){if(!mxClient.IS_IE){var d=this.editor.graph;d.container.addEventListener("paste",mxUtils.bind(this,function(g){if(!mxEvent.isConsumed(g))try{for(var n=g.clipboardData||g.originalEvent.clipboardData,
t=!1,u=0;u<n.types.length;u++)if("text/"===n.types[u].substring(0,5)){t=!0;break}if(!t){var v=n.items;for(index in v){var B=v[index];if("file"===B.kind){if(d.isEditing())this.importFiles([B.getAsFile()],0,0,this.maxImageSize,function(L,G,T,p,q,C){d.insertImage(L,q,C)},function(){},function(L){return"image/"==L.type.substring(0,6)},function(L){for(var G=0;G<L.length;G++)L[G]()});else{var H=this.editor.graph.getInsertPoint();this.importFiles([B.getAsFile()],H.x,H.y,this.maxImageSize);mxEvent.consume(g)}break}}}}catch(L){}}),
!1)}};EditorUi.prototype.installNativeClipboardHandler=function(){function d(){window.setTimeout(function(){n.innerHTML="&nbsp;";n.focus();document.execCommand("selectAll",!1,null)},0)}var g=this.editor.graph,n=document.createElement("div");n.setAttribute("autocomplete","off");n.setAttribute("autocorrect","off");n.setAttribute("autocapitalize","off");n.setAttribute("spellcheck","false");n.style.textRendering="optimizeSpeed";n.style.fontFamily="monospace";n.style.wordBreak="break-all";n.style.background=