Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var q=new Spinner({left:"50%",lines:12,length:8,width:3,radius:5,rotate:0,color:"#000",speed:1,trail:60,shadow:!1,hwaccel:!1,className:"spinner",zIndex:2E9}),C=new Editor,J=null,F=null,O=null,S=!1,K=[],R=null,m=null;this.getSelectedItem=function(){null!=F&&l(F);return F};if(null==g("#mxODPickerCss")){var A=document.head||document.getElementsByTagName("head")[0],M=document.createElement("style");A.appendChild(M);M.type="text/css";M.id="mxODPickerCss";M.appendChild(document.createTextNode(p))}b.innerHTML=