Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"auto"==ya&&1==xa.length){O.view.validate();var db=new mxHierarchicalLayout(O,"horizontalflow"==ya?mxConstants.DIRECTION_WEST:mxConstants.DIRECTION_NORTH);db.intraCellSpacing=Y;db.parallelEdgeSpacing=aa;db.interRankCellSpacing=ka;db.disableEdgeStyle=!1;this.executeLayout(function(){db.execute(O.getDefaultParent(),sa);O.moveCells(sa,wa,Ca)},!0,ra);ra=null}else if("orgchart"==ya){O.view.validate();var lb=new mxOrgChartLayout(O,2,ka,Y),kb=lb.isVertexIgnored;lb.isVertexIgnored=function(jb){return kb.apply(this,
arguments)||0>mxUtils.indexOf(A,jb)};this.executeLayout(function(){lb.execute(O.getDefaultParent());ab()},!0,ra);ra=null}else if("organic"==ya||"auto"==ya&&sa.length>A.length){O.view.validate();var Pa=new mxFastOrganicLayout(O);Pa.forceConstant=3*Y;Pa.disableEdgeStyle=!1;Pa.resetEdges=!1;var eb=Pa.isVertexIgnored;Pa.isVertexIgnored=function(jb){return eb.apply(this,arguments)||0>mxUtils.indexOf(A,jb)};this.executeLayout(function(){Pa.execute(O.getDefaultParent());ab()},!0,ra);ra=null}}this.hideDialog()}finally{O.model.endUpdate()}null!=