Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
App.prototype.filterDrafts=function(b,f,m){function d(){m(u)}var u=[];try{this.getDatabaseItems(mxUtils.bind(this,function(v){EditorUi.debug("App.filterDrafts",[this],"items",v);for(var D=0;D<v.length;D++)try{var F=v[D].key;if(null!=F&&".draft_"==F.substring(0,7)){var K=JSON.parse(v[D].data);null!=K&&"draft"==K.type&&K.aliveCheck!=f&&(null==b&&null==K.fileObject||null!=K.fileObject&&K.fileObject.path==b)&&(K.key=F,u.push(K))}}catch(M){}d()}),d)}catch(v){d()}};