Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p=mxEvent.getClientY(b);e.popup(g,p,null,b);this.setCurrentMenu(e);mxEvent.consume(b)}))};EditorUi.prototype.createTabForPage=function(b,e){var g=this.createTab(),p=b.getName()||mxResources.get("untitled"),y=b.getId();g.setAttribute("title",p+(null!=y?" ("+y+")":"")+" ["+e+"]");e=document.createElement("span");mxUtils.write(e,p);g.appendChild(e);this.addTabListeners(b,g);return g};