Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxClient.IS_CHROMEAPP)&&this.addMenuItems(f,["showStartScreen"],u),this.addMenuItems(f,["configuration"],u),f.addSeparator(u),"1"==urlParams.newTempDlg&&(d.actions.addAction("templates",function(){function E(k){return{id:k.id,isExt:!0,url:k.downloadUrl,title:k.title,imgUrl:k.thumbnailLink,changedBy:k.lastModifyingUserName,lastModifiedOn:k.modifiedDate}}var M=new TemplatesDialog(d,function(k){console.log(arguments)},null,null,null,"user",function(k,x,F){var Q=new Date;Q.setDate(Q.getDate()-7);d.drive.listFiles(null,