Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=b.currentPage&&null!=b.pages&&(K=mxUtils.indexOf(b.pages,b.currentPage));for(J=f.length-1;0<=J;J--){var R=function(W){var X=new Date(W.modifiedDate),Z=null;if(0<=X.getTime()){var Y=function(fa){c.stop();D.innerText="";var na=mxUtils.parseXml(fa),da=b.editor.extractGraphModel(na.documentElement,!0);if(null!=da){var za=function(Ba){null!=Ba&&(Ba=Ca(Editor.parseDiagramNode(Ba)));return Ba},Ca=function(Ba){var ba=Ba.getAttribute("background");if(null==ba||""==ba||ba==mxConstants.NONE)ba=F.defaultPageBackgroundColor;
v.style.backgroundColor=ba;(new mxCodec(Ba.ownerDocument)).decode(Ba,F.getModel());F.maxFitScale=1;F.fit(8);F.center();return Ba};L.style.display="none";L.innerText="";x=na;C=fa;M=parseSelectFunction=null;G=0;if("mxfile"==da.nodeName){na=da.getElementsByTagName("diagram");M=[];for(fa=0;fa<na.length;fa++)M.push(na[fa]);G=Math.min(K,M.length-1);0<M.length&&za(M[G]);if(1<M.length)for(L.removeAttribute("disabled"),L.style.display="",fa=0;fa<M.length;fa++)na=document.createElement("option"),da=M[fa].getAttribute("name")||