Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.diagramContainer.scrollTop+ma.y,null,null,null,null,mxUtils.bind(this,function(ba){return f.getCenterInsertPoint(f.getBoundingBoxFromGeometry(ba,!0))}),"simple"==d,!1)}mxEvent.consume(ia)}));H.style.backgroundSize="24px";"simple"==d?H.style.flexShrink="0":H.style.marginBottom="4px";var G=!1,ja=mxUtils.bind(this,function(ia){if(ia||document.body.contains(k)){ia=function(da,P,V,l,B,N){null!=P&&da.setAttribute("title",P);da.style.cursor="pointer";da.style.margin="simple"==d?"0px":"8px 0px 8px 2px";
da.style.display="simple"==d?"inline-block":"block";k.appendChild(da);"simple"==d?da.style.opacity="0.7":null!=l&&(P=B,P=null!=P?P:30,N=null!=N?N:26,da.style.position="relative",da.style.overflow="visible",V=document.createElement("div"),V.style.position="absolute",V.style.fontSize="8px",V.style.left=P+"px",V.style.top=N+"px",mxUtils.write(V,l),da.appendChild(V));return da};k.innerText="";if(!G){var ma=window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth;"simple"==d&&