Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"ellipsis";A.setAttribute("title",E.title+" ("+E.id+")");var N=document.createElement("input");N.setAttribute("type","checkbox");N.checked=b.sidebar.isEntryVisible(E.id);N.defaultChecked=N.checked;A.appendChild(N);mxUtils.write(A," "+E.title);G.appendChild(A);var Q=function(L){if(null==L||"INPUT"!=mxEvent.getSource(L).nodeName){S.style.textAlign="center";S.style.padding="0px";S.style.color="";S.innerText="";if(null!=E.desc){var U=document.createElement("pre");U.style.boxSizing="border-box";U.style.fontFamily=
"inherit";U.style.margin="20px";U.style.right="0px";U.style.textAlign="left";mxUtils.write(U,E.desc);S.appendChild(U)}null!=E.imageCallback?E.imageCallback(S):null!=E.image?S.innerHTML+='<img border="0" style="max-width:100%;" src="'+E.image+'"/>':null==E.desc&&(S.style.padding="20px",S.style.color="rgb(179, 179, 179)",mxUtils.write(S,mxResources.get("noPreview")));null!=J&&(J.style.backgroundColor="");J=A;J.style.backgroundColor=Editor.isDarkMode()?"#000000":"#ebf2f9";null!=L&&mxEvent.consume(L)}};