Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0));mxEvent.addListener(la,"change",oa);mxEvent.addListener(la,"keydown",oa);mxEvent.addListener(la,"cut",oa);mxEvent.addListener(la,"paste",oa);mxEvent.addListener(la,"keydown",function(Ga){13==Ga.keyCode&&La.click()});oa=document.createElement("div");oa.style.height="40px";oa.style.marginTop="4px";oa.style.marginBottom="4px";oa.style.whiteSpace="nowrap";oa.style.overflowX="auto";oa.style.overflowY="hidden";oa.appendChild(ha);oa.appendChild(La);aa.appendChild(oa);aa.appendChild(ma);return aa}function I(){if(za&&
null!=c)m||b.hideDialog(),c(za,Ba,N.value);else if(d)m||b.hideDialog(),d(na,N.value,Ca,ea);else{var aa=N.value;null!=aa&&0<aa.length&&b.pickFolder(b.mode,function(la){b.createFile(aa,na,null!=ea&&0<ea.length?ea:null,null,function(){b.hideDialog()},null,la,null,null!=fa&&0<fa.length?fa:null)},b.mode!=App.MODE_GOOGLE||null==b.stateArg||null==b.stateArg.folderId)}}function B(aa,la,ma,oa,ha,ja,sa){null!=da&&(da.style.backgroundColor="transparent",da.style.border="1px solid transparent");U.removeAttribute("disabled");