Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function n(A){null!=A&&(A=l(Editor.parseDiagramNode(A)));return A}mxEvent.addListener(T,"change",function(A){C=parseInt(T.value);n(I[C]);mxEvent.consume(A)});if("mxfile"==x.nodeName){var z=x.getElementsByTagName("diagram");I=[];for(var E=0;E<z.length;E++)I.push(z[E]);0<I.length&&n(I[C]);T.innerText="";if(1<I.length)for(T.style.display="",E=0;E<I.length;E++)z=document.createElement("option"),mxUtils.write(z,I[E].getAttribute("name")||mxResources.get("pageWithNumber",[E+1])),z.setAttribute("value",