Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!l){var Q=function(){H.value=Math.max(1,Math.min(A,Math.max(parseInt(H.value),parseInt(g.value))));g.value=Math.max(1,Math.min(A,Math.min(parseInt(H.value),parseInt(g.value))))},L=d.addRadiobox(n,"pages",mxResources.get("allPages"),!0),U=d.addRadiobox(n,"pages",mxResources.get("pages")+":",!1,null,!0),g=document.createElement("input");g.style.cssText="margin:0 8px 0 8px;";g.setAttribute("value","1");g.setAttribute("type","number");g.setAttribute("min","1");g.style.width="50px";n.appendChild(g);var y=