Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
EditorUi.prototype.diffCellRecursive=function(b,f,m,d,u){d=null!=d?d:{};var v=m[b.getId()];delete m[b.getId()];if(null==v)u.push(b.getId());else{var D=this.diffCell(b,v.cell);if(null!=D.parent||(null!=v.prev?null==f:null!=f)||null!=f&&null!=v.prev&&f.getId()!=v.prev.getId())D.previous=null!=v.prev?v.prev.getId():"";mxUtils.isEmptyObject(D)||(d[b.getId()]=D)}v=b.getChildCount();f=null;for(D=0;D<v;D++){var F=b.getChildAt(D);this.diffCellRecursive(F,f,m,d,u);f=F}return d};