Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
L=document.createElement("div");L.style.marginTop="6px";L.style.display="inline-block";L.style.width="140px";mxUtils.write(L,mxResources.get("siblingSpacing")+": ");Q.appendChild(L);var O=document.createElement("input");O.type="number";O.value=A;O.style.width="200px";O.style.boxSizing="border-box";Q.appendChild(O);mxEvent.addListener(O,"change",function(){A=O.value});L=mxUtils.button(mxResources.get("custom")+"...",function(){var P=[{layout:"mxOrgChartLayout",config:{branchOptimizer:parseInt(U.value),
parentChildSpacing:parseInt(H.value),siblingSpacing:parseInt(O.value)}}];d.hideDialog();d.showCustomLayoutDialog(JSON.stringify(P,null,2))});L.className="geBtn";Q=new CustomDialog(d,Q,function(){null==z&&(z=2);d.loadOrgChartLayouts(N)},null,null,null,L);d.showDialog(Q.container,355,140,!0,!0)},n,null,v());l.addSeparator(n);l.addItem(mxResources.get("parallels"),null,mxUtils.bind(this,function(){d.tryAndHandle(mxUtils.bind(this,function(){var z=new mxParallelEdgeLayout(u);z.checkOverlap=!0;d.prompt(mxResources.get("spacing"),
z.spacing,mxUtils.bind(this,function(E){d.tryAndHandle(mxUtils.bind(this,function(){z.spacing=E;d.executeLayout(function(){z.execute(u.getDefaultParent(),u.isSelectionEmpty()?null:u.getSelectionCells())},!1)}))}))}))}),n);l.addSeparator(n);d.menus.addMenuItem(l,"runLayout",n,null,null,mxResources.get("custom")+"...")};this.put("help",new Menu(mxUtils.bind(this,function(l,n){if(!mxClient.IS_CHROMEAPP&&d.isOffline())this.addMenuItems(l,["about"],n);else{var z=l.addItem("Search:",null,null,n,null,null,