Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CreateDialog=function(b,e,f,c,k,l,x,y,E,D,z,N,I,d,g,n,t){function u(q,C,J,F){function O(){mxEvent.addListener(S,"click",function(){var M=J;if(x){var Q=H.value,U=Q.lastIndexOf(".");if(0>e.lastIndexOf(".")&&0>U){M=null!=M?M:p.value;var W="";M==App.MODE_GOOGLE?W=b.drive.extension:M==App.MODE_GITHUB?W=b.gitHub.extension:M==App.MODE_GITLAB?W=b.gitLab.extension:M==App.MODE_TRELLO?W=b.trello.extension:M==App.MODE_DROPBOX?W=b.dropbox.extension:M==App.MODE_ONEDRIVE?W=b.oneDrive.extension:M==App.MODE_DEVICE&&
(W=".drawio");0<=U&&(Q=Q.substring(0,U));H.value=Q+W}}v(J)})}var S=document.createElement("a");S.style.overflow="hidden";var K=document.createElement("img");K.src=q;K.setAttribute("border","0");K.setAttribute("align","absmiddle");K.style.width="60px";K.style.height="60px";K.style.paddingBottom="6px";S.style.display="inline-block";S.className="geBaseButton";S.style.position="relative";S.style.margin="4px";S.style.padding="8px 8px 10px 8px";S.style.whiteSpace="nowrap";S.appendChild(K);S.style.color=