Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0;ja<ta.length;ja++)oa=ta[ja],0==ha==(null==la[oa.url])&&(Ga[oa.url]=!0,La.push(oa));la=Ga;ha++}0==La.length?za.innerText=mxResources.get("noResultsFor",[ia]):B(La,!0)}}function A(ia){if(Y!=ia||R!=ea)q(),Ba.scrollTop=0,da.innerText="",za.innerText=mxResources.get("searchResults")+' "'+ia+'"',Ua=null,fa?E(ia):F&&(ia?(Qa.spin(da),g=!1,U=!0,F(ia,Va,function(){k(mxResources.get("searchFailed"));Va([])},R?null:v)):z(R)),Y=ia,ea=R}function N(ia){null!=Ua&&clearTimeout(Ua);13==ia.keyCode?A(xa.value):Ua=
setTimeout(function(){A(xa.value)},1E3)}var Q='<div class="geTempDlgHeader"><img src="/images/draw.io-logo.svg" class="geTempDlgHeaderLogo"><input type="search" class="geTempDlgSearchBox" '+(F?"":'style="display: none"')+' placeholder="'+mxResources.get("search")+'"></div><div class="geTemplatesList" style="display: none"><div class="geTempDlgBack">&lt; '+mxResources.get("back")+'</div><div class="geTempDlgHLine"></div><div class="geTemplatesLbl">'+mxResources.get("templates")+'</div></div><div class="geTempDlgContent" style="width: 100%"><div class="geTempDlgNewDiagramCat"><div class="geTempDlgNewDiagramCatLbl">'+