Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Z+"')";break;default:null==V?K=[{driveId:P}]:K.push({name:Y,driveId:P,folderId:V}),qa=(P?"/drives/"+P:"/me/drive")+(V?"/items/"+V:"/root")+"/children"}ea||(qa+=(0<qa.indexOf("?")?"&":"?")+"select=id,name,description,parentReference,file,createdBy,lastModifiedBy,lastModifiedDateTime,size,folder,remoteItem,@microsoft.graph.downloadUrl");var ia=[];ba()}}function L(P){U.className=U.className.replace("odCatSelected","");U=P;U.className+=" odCatSelected"}function G(P){S||(W=null,H("search",null,null,null,
P))}var T="";null==e&&(e=u,T='<div style="text-align: center;" class="odPreview"></div>');null==k&&(k=function(){var P=null;try{P=JSON.parse(localStorage.getItem("mxODPickerRecentList"))}catch(V){}return P});null==l&&(l=function(P){if(null!=P){var V=k()||{};delete P["@microsoft.graph.downloadUrl"];V[P.id]=P;localStorage.setItem("mxODPickerRecentList",JSON.stringify(V))}});T='<div class="odCatsList"><div class="odCatsListLbl">OneDrive</div><div id="odFiles" class="odCatListTitle odCatSelected">'+mxUtils.htmlEntities(mxResources.get("files"))+