Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){var P=this.getCurrentFile(),V=null!=P&&null!=P.getTitle()?P.getTitle():this.defaultFilename;ca!=V&&P==ia&&(f.invalidateDescendantsWithPlaceholders(f.model.getRoot()),f.view.validate());ca=V;ia=P}));var ma=f.labelLinkClicked;f.labelLinkClicked=function(P,V,l){var B=V.getAttribute("href");if(null==B||!f.isCustomLink(B)||!mxEvent.isTouchEvent(l)&&mxEvent.isPopupTrigger(l))ma.apply(this,arguments);else{if(!f.isEnabled()||null!=P&&f.isCellLocked(P.cell))f.customLinkClicked(B),f.getRubberband().reset();
mxEvent.consume(l)}};this.editor.getOrCreateFilename=function(){var P=d.defaultFilename,V=d.getCurrentFile();null!=V&&(P=null!=V.getTitle()?V.getTitle():P);return P};var ba=this.actions.get("print");ba.setEnabled(!mxClient.IS_IOS||!navigator.standalone);ba.visible=ba.isEnabled();if(!this.editor.chromeless||this.editor.editable)this.keyHandler.bindAction(70,!0,"findReplace"),this.keyHandler.bindAction(77,!0,"editGeometry",!0),this.keyHandler.bindAction(75,!0,"tags"),this.keyHandler.bindAction(65,!1,