Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=b.currentPage&&null!=b.pages&&(E=mxUtils.indexOf(b.pages,b.currentPage));for(I=e.length-1;0<=I;I--){var P=function(V){var X=new Date(V.modifiedDate),Y=null;if(0<=X.getTime()){var Z=function(ba){d.stop();x.innerText="";var ma=mxUtils.parseXml(ba),ea=b.editor.extractGraphModel(ma.documentElement,!0);if(null!=ea){var za=function(Ca){null!=Ca&&(Ca=Ba(Editor.parseDiagramNode(Ca)));return Ca},Ba=function(Ca){var ca=Ca.getAttribute("background");if(null==ca||""==ca||ca==mxConstants.NONE)ca=y.defaultPageBackgroundColor;
l.style.backgroundColor=ca;(new mxCodec(Ca.ownerDocument)).decode(Ca,y.getModel());y.maxFitScale=1;y.fit(8);y.center();return Ca};K.style.display="none";K.innerText="";B=ma;H=ba;D=parseSelectFunction=null;z=0;if("mxfile"==ea.nodeName){ma=ea.getElementsByTagName("diagram");D=[];for(ba=0;ba<ma.length;ba++)D.push(ma[ba]);z=Math.min(E,D.length-1);0<D.length&&za(D[z]);if(1<D.length)for(K.removeAttribute("disabled"),K.style.display="",ba=0;ba<D.length;ba++)ma=document.createElement("option"),ea=D[ba].getAttribute("name")||