Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CreateDialog=function(b,f,m,d,u,v,D,F,K,M,G,S,J,c,e,k,q){function p(n,z,E,A){function N(){mxEvent.addListener(Q,"click",function(){var H=E;if(D){var O=C.value,P=O.lastIndexOf(".");if(0>f.lastIndexOf(".")&&0>P){H=null!=H?H:l.value;var V="";H==App.MODE_GOOGLE?V=b.drive.extension:H==App.MODE_GITHUB?V=b.gitHub.extension:H==App.MODE_GITLAB?V=b.gitLab.extension:H==App.MODE_TRELLO?V=b.trello.extension:H==App.MODE_DROPBOX?V=b.dropbox.extension:H==App.MODE_ONEDRIVE?V=b.oneDrive.extension:H==App.MODE_DEVICE&&
(V=".drawio");0<=P&&(O=O.substring(0,P));C.value=O+V}}t(E)})}var Q=document.createElement("a");Q.style.overflow="hidden";var L=document.createElement("img");L.src=n;L.setAttribute("border","0");L.setAttribute("align","absmiddle");L.style.width="60px";L.style.height="60px";L.style.paddingBottom="6px";Q.style.display="inline-block";Q.className="geBaseButton";Q.style.position="relative";Q.style.margin="4px";Q.style.padding="8px 8px 10px 8px";Q.style.whiteSpace="nowrap";Q.appendChild(L);Q.style.color=