Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
l);this.handleError(c,e,k,q,p)}),T,mxResources.get("changeUser"),mxUtils.bind(this,function(){function z(){Q.innerText="";for(var L=0;L<E.length;L++){var U=document.createElement("option");mxUtils.write(U,E[L].displayName);U.value=L;Q.appendChild(U);U=document.createElement("option");U.innerHTML="&nbsp;&nbsp;&nbsp;";mxUtils.write(U,"<"+E[L].email+">");U.setAttribute("disabled","disabled");Q.appendChild(U)}U=document.createElement("option");mxUtils.write(U,mxResources.get("addAccount"));U.value=E.length;
Q.appendChild(U)}var E=this.drive.getUsersList(),A=document.createElement("div"),N=document.createElement("span");N.style.marginTop="6px";mxUtils.write(N,mxResources.get("changeUser")+": ");A.appendChild(N);var Q=document.createElement("select");Q.style.width="200px";z();mxEvent.addListener(Q,"change",mxUtils.bind(this,function(){var L=Q.value,U=E.length!=L;U&&this.drive.setUser(E[L]);this.drive.authorize(U,mxUtils.bind(this,function(){U||(E=this.drive.getUsersList(),z())}),mxUtils.bind(this,function(g){this.handleError(g)}),