Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(l,y){var J=c.getCurrentFile();null==J||J.getMode()!=App.MODE_GOOGLE&&J.getMode()!=App.MODE_GITHUB||!/(\.png)$/i.test(J.getTitle())||this.addMenuItems(l,["liveImage","-"],y);this.addMenuItems(l,["embedImage","embedSvg","-","embedHtml"],y);navigator.standalone||c.isOffline()||this.addMenuItems(l,["embedIframe"],y);"1"==urlParams.embed||c.isOffline()||this.addMenuItems(l,"- googleDocs googleSlides googleSheets - microsoftOffice - embedNotion".split(" "),y)})));c.addInsertItem=function(l,y,J,
G){("plantUml"!=G||EditorUi.enablePlantUml&&!c.isOffline())&&l.addItem(J,null,mxUtils.bind(this,function(){if("fromText"==G||"formatSql"==G||"plantUml"==G||"mermaid"==G){var P=new ParseDialog(c,J,G);c.showDialog(P.container,620,420,!0,!1);c.dialog.container.style.overflow="auto"}else P=new CreateGraphDialog(c,J,G),c.showDialog(P.container,620,420,!0,!1);P.init()}),y,null,m())};var V=function(l){k.getModel().beginUpdate();try{l=k.addCell(l),k.fireEvent(new mxEventObject("cellsInserted","cells",[l])),