Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
if(null==ma&&(ha=oa.indexOf("/"),ma=oa.substring(0,ha),null==la)){var ja=oa.indexOf("/",ha+1);-1<ja&&(la=oa.substring(ha+1,ja))}ha=Ea[ma];null==ha&&(Sa++,ha=[],Ea[ma]=ha);oa=ia.getAttribute("clibs");null!=aa[oa]&&(oa=aa[oa]);oa={url:ia.getAttribute("url"),libs:ia.getAttribute("libs"),title:ia.getAttribute("title")||ia.getAttribute("name"),preview:ia.getAttribute("preview"),clibs:oa,tags:ia.getAttribute("tags")};ha.push(oa);null!=la&&(ha=Da[ma],null==ha&&(ha={},Da[ma]=ha),ma=ha[la],null==ma&&(ma=[],
ha[la]=ma),ma.push(oa))}ia=ia.nextSibling}l(Ea,Ta,Ha)}})}function z(ia){D&&(Ba.scrollTop=0,da.innerText="",Qa.spin(da),g=!1,U=!0,za.innerText=mxResources.get("recentDiag"),Y=null,D(Va,function(){k(mxResources.get("cannotLoad"));Va([])},ia?null:v))}function E(ia){if(""==ia)null!=H&&(H.click(),H=null);else{if(null==TemplatesDialog.tagsList[d]){var aa={};for(La in Ea)for(var la=Ea[La],ma=0;ma<la.length;ma++){var oa=la[ma];if(null!=oa.tags)for(var ha=oa.tags.toLowerCase().split(";"),ja=0;ja<ha.length;ja++)null==