Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
H=y.editor.graph;if(H.isEnabled()){var O=y.getCurrentFile();null!=O&&O.isAutosaveOptional()&&g.appendChild(this.createOption(mxResources.get("autosave"),function(){return y.editor.autosave},function(R){y.editor.setAutosave(R);y.editor.autosave&&O.isModified()&&O.fileChanged()},{install:function(R){this.listener=function(){R(y.editor.autosave)};y.editor.addListener("autosaveChanged",this.listener)},destroy:function(){y.editor.removeListener(this.listener)}}))}if(this.isMathOptionVisible()&&H.isEnabled()&&