Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
B);ImageDialog.filePicked=function(F){F.action==google.picker.Action.PICKED&&null!=F.docs[0].thumbnails&&(F=F.docs[0].thumbnails[F.docs[0].thumbnails.length-1],null!=F&&(I.value=F.url,B()));I.focus()};y.appendChild(N);y.appendChild(d);mxUtils.br(y);mxUtils.br(y);D?(N.setAttribute("checked","checked"),N.checked=!0):(z.setAttribute("checked","checked"),z.checked=!0);!E&&N.checked&&(mxUtils.write(t,mxResources.get("pageNotFound")),t.setAttribute("disabled","disabled"),t.setAttribute("selected","selected"),