Language: JavaScript
Label: safe
CWE: CWE-352 \u2014 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

Code:
            "footerCallback": function(row, data, start, end, display) {

                var api = this.api();

                api.columns('.countTotal, .highlightWithCountTotal', {
                page: 'current'
                }).every(function() {
                    var sum = this
                        .data()
                        .reduce(function(a, b) {
                        var x = parseFloat(a) || 0;
                        var y = parseFloat(b) || 0;
                        return x + y;
                        }, 0);
                    //console.log(BMS.fn._n(sum)); //alert(sum);
                    $(this.footer()).html(sum.toFixed(2).replace(/\d(?=(\d{3})+\.)/g, '$&,'));
                });

            }