Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
DriveComment.prototype.deleteComment=function(b,e){this.file.ui.drive.executeRequest(this.pCommentId?{url:"/files/"+this.file.getId()+"/comments/"+this.pCommentId+"/replies/"+this.id,method:"DELETE"}:{url:"/files/"+this.file.getId()+"/comments/"+this.id,method:"DELETE"},b,e)};function mxODPicker(b,e,f,c,k,l,x,y,E,D,z,N,I,d){function g(P,V){V=V||document;return V.querySelector(P)}function n(P,V,X){if(null==P["@microsoft.graph.downloadUrl"])if(null==P.parentReference)X();else{c(P.id,P.parentReference.driveId,function(da){n(da,V,X)},X);return}var Y=new XMLHttpRequest;Y.open("GET",P["@microsoft.graph.downloadUrl"]);var Z=P.file?"image/png"==P.file.mimeType:!1;Y.onreadystatechange=function(){if(4==this.readyState){if(200<=this.status&&299>=this.status)try{var da=Y.responseText;
Z&&(da="data:image/png;base64,"+Editor.base64Encode(da),da=Editor.extractGraphModelFromPng(da));var ba=mxUtils.parseXml(da),ma="mxlibrary"==ba.documentElement.nodeName?ba.documentElement:Editor.extractGraphModel(ba.documentElement);if(null!=ma){V(ma.ownerDocument);return}}catch(ea){}X()}};Z&&Y.overrideMimeType&&Y.overrideMimeType("text/plain; charset=x-user-defined");Y.send()}function t(){N&&null!=J?C.exportToCanvas(function(P){P=EditorUi.prototype.createImageDataUri(P,null,"png");x(F,P);l(F)},400,