Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ua.innerText=ka;ha.appendChild(ua);qa.appendChild(ha);mxEvent.addListener(ha,"click",function(){function Ma(){var Aa=Ia.querySelector(".geTemplateDrawioCatLink");null!=Aa?Aa.click():setTimeout(Ma,200)}ba=!0;var Ia=K.querySelector(".geTemplatesList");Ia.style.display="block";Ca.style.width="";xa.style.display="";xa.value="";Z=null;Ma()});ma.style.display=ja.length<=la?"none":""}function p(ja,aa,la){function na(La,Xa){La=mxResources.get(La,null,La.substring(0,1).toUpperCase()+La.substring(1));var Sa=
La+" ("+Xa.length+")",Ta=La=mxUtils.htmlEntities(La);15<La.length&&(La=La.substring(0,15)+"&hellip;");return{lbl:La+" ("+Xa.length+")",fullLbl:Sa,lblOnly:Ta}}function pa(La,Xa,Sa,Ta,Pa){mxEvent.addListener(Sa,"click",function(){A!=Sa&&(null!=A?(A.style.fontWeight="normal",A.style.textDecoration="none"):(fa.style.display="none",ca.style.minHeight="100%"),A=Sa,A.style.fontWeight="bold",A.style.textDecoration="underline",Ca.scrollTop=0,R&&(m=!0),za.innerHTML=Xa,Ba.style.display="none",G(Pa?aa[La]:Ta?