Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p);this.handleError(d,g,n,t,u)}),T,mxResources.get("changeUser"),mxUtils.bind(this,function(){function C(){S.innerText="";for(var K=0;K<J.length;K++){var R=document.createElement("option");mxUtils.write(R,J[K].displayName);R.value=K;S.appendChild(R);R=document.createElement("option");R.innerHTML="&nbsp;&nbsp;&nbsp;";mxUtils.write(R,"<"+J[K].email+">");R.setAttribute("disabled","disabled");S.appendChild(R)}R=document.createElement("option");mxUtils.write(R,mxResources.get("addAccount"));R.value=J.length;
S.appendChild(R)}var J=this.drive.getUsersList(),F=document.createElement("div"),O=document.createElement("span");O.style.marginTop="6px";mxUtils.write(O,mxResources.get("changeUser")+": ");F.appendChild(O);var S=document.createElement("select");S.style.width="200px";C();mxEvent.addListener(S,"change",mxUtils.bind(this,function(){var K=S.value,R=J.length!=K;R&&this.drive.setUser(J[K]);this.drive.authorize(R,mxUtils.bind(this,function(){R||(J=this.drive.getUsersList(),C())}),mxUtils.bind(this,function(m){this.handleError(m)}),