Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0==H%2,da.flipBkg),y.parentNode.insertBefore(qa,y.nextSibling),y=qa;g.appendChild(na);Ba();return g};StyleFormatPanel.prototype.addStyles=function(g){if(null!=this.defaultColorSchemes){var y=function(da){mxEvent.addListener(da,"mouseenter",function(){da.style.opacity="1"});mxEvent.addListener(da,"mouseleave",function(){da.style.opacity="0.5"})},H=this.editorUi,O=H.editor.graph,P=document.createElement("div");P.style.whiteSpace="nowrap";P.style.paddingLeft="24px";P.style.paddingRight="20px";g.style.paddingLeft=