Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
S,y=x=null,B()):this.ui.spinner.spin(z,mxResources.get("loading"))&&(O=encodeURIComponent(O.slice(2,O.length).join("/")),this.getFile(F+"/"+S+"/"+O,mxUtils.bind(this,function(K){this.ui.spinner.stop();k=K.meta.org;l=K.meta.repo;x=decodeURIComponent(K.meta.ref);y="";v()}),mxUtils.bind(this,function(K){this.ui.spinner.stop();this.ui.handleError({message:mxResources.get("fileNotFound")})})))}else this.ui.spinner.stop(),this.ui.handleError({message:mxResources.get("invalidName")})}}),mxResources.get("enterValue"));