Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var CreateDialog=function(b,e,f,c,k,l,x,y,E,D,z,N,I,d,g,n,t){function u(q,C,J,F){function O(){mxEvent.addListener(S,"click",function(){var M=J;if(x){var Q=H.value,U=Q.lastIndexOf(".");if(0>e.lastIndexOf(".")&&0>U){M=null!=M?M:p.value;var W="";M==App.MODE_GOOGLE?W=b.drive.extension:M==App.MODE_GITHUB?W=b.gitHub.extension:M==App.MODE_GITLAB?W=b.gitLab.extension:M==App.MODE_TRELLO?W=b.trello.extension:M==App.MODE_DROPBOX?W=b.dropbox.extension:M==App.MODE_ONEDRIVE?W=b.oneDrive.extension:M==App.MODE_DEVICE&&
(W=".drawio");0<=U&&(Q=Q.substring(0,U));H.value=Q+W}}v(J)})}var S=document.createElement("a");S.style.overflow="hidden";var K=document.createElement("img");K.src=q;K.setAttribute("border","0");K.setAttribute("align","absmiddle");K.style.width="60px";K.style.height="60px";K.style.paddingBottom="6px";S.style.display="inline-block";S.className="geBaseButton";S.style.position="relative";S.style.margin="4px";S.style.padding="8px 8px 10px 8px";S.style.whiteSpace="nowrap";S.appendChild(K);S.style.color=
"gray";S.style.fontSize="11px";var R=document.createElement("div");S.appendChild(R);mxUtils.write(R,C);if(null!=F&&null==b[F]){K.style.visibility="hidden";mxUtils.setOpacity(R,10);var m=new Spinner({lines:12,length:12,width:5,radius:10,rotate:0,color:"#000",speed:1.5,trail:60,shadow:!1,hwaccel:!1,top:"40%",zIndex:2E9});m.spin(S);var A=window.setTimeout(function(){null==b[F]&&(m.stop(),S.style.display="none")},3E4);b.addListener("clientLoaded",mxUtils.bind(this,function(){null!=b[F]&&(window.clearTimeout(A),
mxUtils.setOpacity(R,100),K.style.visibility="",m.stop(),O())}))}else O();G.appendChild(S);++T==N&&(mxUtils.br(G),T=0)}function v(q){var C=H.value;if(null==q||null!=C&&0<C.length)t&&b.hideDialog(),f(C,q,H)}z="1"==urlParams.noDevice?!1:z;x=null!=x?x:!0;y=null!=y?y:!0;N=null!=N?N:4;t=null!=t?t:!0;l=document.createElement("div");l.style.whiteSpace="nowrap";null==c&&b.addLanguageMenu(l);var B=document.createElement("h2");mxUtils.write(B,k||mxResources.get("create"));B.style.marginTop="0px";B.style.marginBottom=