Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!this.editor.editable&&(k.getHash=function(){return"G"+e},window.location.hash="#"+k.getHash());null!=d&&d()}));return!0}return!1});!c()&&this.spinner.spin(document.body,mxResources.get("loading"))&&this.addListener("clientLoaded",c);return!0});this.loadTemplate(G,mxUtils.bind(this,function(c){this.spinner.stop();if(null!=c&&0<c.length){var e=this.defaultFilename;if(null==urlParams.title&&"1"!=urlParams.notitle){var k=G,q=G.lastIndexOf("."),p=k.lastIndexOf("/");q>p&&0<p&&(k=k.substring(p+1,q),q=G.substring(q),