Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
I.offsetTop);this.showShapePicker(Math.max(this.diagramContainer.scrollLeft+Math.max(24,E.x)),this.diagramContainer.scrollTop+E.y,null,null,null,null,mxUtils.bind(this,function(A){return e.getCenterInsertPoint(e.getBoundingBoxFromGeometry(A,!0))}),"simple"==c,!1)}mxEvent.consume(z)}));x.style.backgroundSize="24px";"simple"==c?x.style.flexShrink="0":x.style.marginBottom="4px";var B=!1,T=mxUtils.bind(this,function(z){if(z||document.body.contains(k)){z=function(Q,L,U,g,y,H){null!=L&&Q.setAttribute("title",
L);Q.style.cursor="pointer";Q.style.margin="simple"==c?"0px":"8px 0px 8px 2px";Q.style.display="simple"==c?"inline-block":"block";k.appendChild(Q);"simple"==c?Q.style.opacity="0.7":null!=g&&(L=y,L=null!=L?L:30,H=null!=H?H:26,Q.style.position="relative",Q.style.overflow="visible",U=document.createElement("div"),U.style.position="absolute",U.style.fontSize="8px",U.style.left=L+"px",U.style.top=H+"px",mxUtils.write(U,g),Q.appendChild(U));return Q};k.innerText="";if(!B){var E=window.innerWidth||document.documentElement.clientWidth||