Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
xa.length;sa<Ma;sa++)xa.push(oa);xa=xa.join(",");wa.setCellStyles(x.dependentProps[Da],xa,wa.getSelectionCells());Q.push(x.dependentProps[Da]);X.push(xa)}if("function"==typeof x.onChange)x.onChange(wa,Ma);pa.editorUi.fireEvent(new mxEventObject("styleChanged","keys",Q,"values",X,"cells",wa.getSelectionCells()))}finally{wa.getModel().endUpdate()}}function U(Da,Ma,x){var L=mxUtils.getOffset(l,!0),Q=mxUtils.getOffset(Da,!0);Ma.style.position="absolute";Ma.style.left=Q.x-L.x+"px";Ma.style.top=Q.y-L.y+
"px";Ma.style.width=Da.offsetWidth+"px";Ma.style.height=Da.offsetHeight-(x?4:0)+"px";Ma.style.zIndex=5}function aa(Da,Ma,x){var L=document.createElement("div");L.style.width="32px";L.style.height="4px";L.style.margin="2px";L.style.border="1px solid black";L.style.background=Ma&&"none"!=Ma?Ma:"url('"+Dialog.prototype.noColorImage+"')";btn=mxUtils.button("",mxUtils.bind(pa,function(Q){this.editorUi.pickColor(Ma,function(X){L.style.background="none"==X?"url('"+Dialog.prototype.noColorImage+"')":X;Z(Da,