Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L.offsetTop);this.showShapePicker(Math.max(this.diagramContainer.scrollLeft+Math.max(24,J.x)),this.diagramContainer.scrollTop+J.y,null,null,null,null,mxUtils.bind(this,function(F){return g.getCenterInsertPoint(g.getBoundingBoxFromGeometry(F,!0))}),"simple"==d,!1)}mxEvent.consume(C)}));B.style.backgroundSize="24px";"simple"==d?B.style.flexShrink="0":B.style.marginBottom="4px";var G=!1,T=mxUtils.bind(this,function(C){if(C||document.body.contains(n)){C=function(S,K,R,m,A,M){null!=K&&S.setAttribute("title",
K);S.style.cursor="pointer";S.style.margin="simple"==d?"0px":"8px 0px 8px 2px";S.style.display="simple"==d?"inline-block":"block";n.appendChild(S);"simple"==d?S.style.opacity="0.7":null!=m&&(K=A,K=null!=K?K:30,M=null!=M?M:26,S.style.position="relative",S.style.overflow="visible",R=document.createElement("div"),R.style.position="absolute",R.style.fontSize="8px",R.style.left=K+"px",R.style.top=M+"px",mxUtils.write(R,m),S.appendChild(R));return S};n.innerText="";if(!G){var J=window.innerWidth||document.documentElement.clientWidth||