Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.sketchMainMenuElt.appendChild(this.sketchPickerMenuElt)):(this.sketchPickerMenuElt.style.cssText="position:absolute;left:10px;border-radius:4px;padding:0px 4px 4px;white-space:nowrap;max-height:100%;z-index:1;width:48px;box-sizing:border-box;transform:translate(0, -50%);top:50%;user-select:none;",this.sketchWrapperElt.appendChild(this.sketchPickerMenuElt));mxClient.IS_POINTER&&(this.sketchPickerMenuElt.style.touchAction="none")}};EditorUi.prototype.getNetworkStatus=function(){var c=null;if(this.isOffline(!0))c=
mxResources.get("offline");else{var e=this.getCurrentFile();null!=e&&(e.invalidChecksum?c=mxResources.get("error")+": "+mxResources.get("checksum"):null==e.sync||e.sync.enabled&&e.sync.isRealtimeActive()?null==e.sync||e.sync.isConnected()?e.isRealtimeEnabled()&&e.isRealtimeSupported()&&1<e.getRealtimeState()&&(c=e.getRealtimeError(),c=mxResources.get("realtimeCollaboration")+": "+(null!=c&&null!=c.message?c.message:mxResources.get("error"))):c=mxResources.get("notConnected"):c=mxResources.get("realtimeCollaboration")+
": "+mxResources.get("disabled"))}return c};EditorUi.prototype.createMenubarForTheme=function(c){if("simple"==c||"sketch"==c){if(null==this.sketchMenubarElt){this.sketchMenubarElt=document.createElement("div");this.sketchMenubarElt.className="geToolbarContainer";if("simple"==c){this.sketchMenubarElt.style.cssText="position:relative;flex-grow:0.5;overflow:visible;"+("1"!=urlParams.embed?"flex-shrink:0;":"min-width:0;")+"display:flex;white-space:nowrap;user-select:none;justify-content:flex-end;align-items:center;flex-wrap:nowrap;gap:6px;";