Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
EditorUi.prototype.patchPage=function(b,f,m,d){var u=b==this.currentPage?this.editor.graph.model:new mxGraphModel(b.root),v=this.createParentLookup(u,f);u.beginUpdate();try{var D=u.updateEdgeParent,F=new mxDictionary,K=[];u.updateEdgeParent=function(q,p){!F.get(q)&&d&&(F.put(q,!0),K.push(q))};var M=v[""],G=null!=M&&null!=M.inserted?M.inserted[""]:null,S=null;null!=G&&(S=this.getCellForJson(G));if(null==S){var J=null!=M&&null!=M.moved?M.moved[""]:null;null!=J&&(S=u.getCell(J))}null!=S&&(u.setRoot(S),