Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
libs:ia.getAttribute("libs"),clibs:ia.getAttribute("clibs"),title:ia.getAttribute("title")}),ia=ia.nextSibling;T(Ia)}});var Va=function(ia,aa,la){Ca.style.display="";Qa.stop();U=!1;if(g)g=!1;else if(aa)da.innerText=aa;else{la=la||{};aa=0;for(var ma in la)aa+=la[ma].length;0==ia.length&&0==aa?da.innerText=mxResources.get("noDiagrams"):B(ia,!1,W,0==aa?null:la)}};z(R);var Ua=null;mxEvent.addListener(xa,"keyup",N);mxEvent.addListener(xa,"search",N);mxEvent.addListener(xa,"input",N);mxEvent.addListener(ka,
"click",function(ia){C(!1,!1)});S&&mxEvent.addListener(Aa,"click",function(ia){C(!1,!0)});J&&mxEvent.addListener(L.querySelector(".geTempDlgLinkToDiagramBtn"),"click",function(ia){C(!0)});mxEvent.addListener(L.querySelector(".geTempDlgCancelBtn"),"click",function(){null!=m&&m();e||b.hideDialog(!0)})};TemplatesDialog.tagsList={};