Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!1,V=function(){P||(P=!0,window.setTimeout(function(){var l=y.getSelectedEditingElement();null!=l&&(l=mxUtils.getCurrentStyle(l),null!=l&&null!=p.toolbar&&(p.toolbar.setFontName(Graph.stripQuotes(l.fontFamily)),p.toolbar.setFontSize(parseInt(l.fontSize))));P=!1},0))};mxEvent.addListener(y.cellEditor.textarea,"input",V);mxEvent.addListener(y.cellEditor.textarea,"touchend",V);mxEvent.addListener(y.cellEditor.textarea,"mouseup",V);mxEvent.addListener(y.cellEditor.textarea,"keyup",V);V()}};var ma=y.cellEditor.stopEditing;