Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
sa.innerText=ja;ha.appendChild(sa);qa.appendChild(ha);mxEvent.addListener(ha,"click",function(){function La(){var ya=Ga.querySelector(".geTemplateDrawioCatLink");null!=ya?ya.click():setTimeout(La,200)}fa=!0;var Ga=L.querySelector(".geTemplatesList");Ga.style.display="block";Ba.style.width="";xa.style.display="";xa.value="";Y=null;La()});na.style.display=ia.length<=la?"none":""}function l(ia,aa,la){function ma(Ka,Xa){Ka=mxResources.get(Ka,null,Ka.substring(0,1).toUpperCase()+Ka.substring(1));var Pa=