Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
ha[la]=ma),ma.push(oa))}ia=ia.nextSibling}l(Ea,Ta,Ha)}})}function z(ia){D&&(Ba.scrollTop=0,da.innerText="",Qa.spin(da),g=!1,U=!0,za.innerText=mxResources.get("recentDiag"),Y=null,D(Va,function(){k(mxResources.get("cannotLoad"));Va([])},ia?null:v))}function E(ia){if(""==ia)null!=H&&(H.click(),H=null);else{if(null==TemplatesDialog.tagsList[d]){var aa={};for(La in Ea)for(var la=Ea[La],ma=0;ma<la.length;ma++){var oa=la[ma];if(null!=oa.tags)for(var ha=oa.tags.toLowerCase().split(";"),ja=0;ja<ha.length;ja++)null==
aa[ha[ja]]&&(aa[ha[ja]]=[]),aa[ha[ja]].push(oa)}TemplatesDialog.tagsList[d]=aa}var sa=ia.toLowerCase().split(" ");aa=TemplatesDialog.tagsList[d];if(0<Ha&&null==aa.__tagsList__){for(La in Ta)for(la=Ta[La],ma=0;ma<la.length;ma++)for(oa=la[ma],ha=oa.title.split(" "),ha.push(La),ja=0;ja<ha.length;ja++){var ta=ha[ja].toLowerCase();null==aa[ta]&&(aa[ta]=[]);aa[ta].push(oa)}aa.__tagsList__=!0}var La=[];la={};for(ma=ha=0;ma<sa.length;ma++)if(0<sa[ma].length){ta=aa[sa[ma]];var Ga={};La=[];if(null!=ta)for(ja=
0;ja<ta.length;ja++)oa=ta[ja],0==ha==(null==la[oa.url])&&(Ga[oa.url]=!0,La.push(oa));la=Ga;ha++}0==La.length?za.innerText=mxResources.get("noResultsFor",[ia]):B(La,!0)}}function A(ia){if(Y!=ia||R!=ea)q(),Ba.scrollTop=0,da.innerText="",za.innerText=mxResources.get("searchResults")+' "'+ia+'"',Ua=null,fa?E(ia):F&&(ia?(Qa.spin(da),g=!1,U=!0,F(ia,Va,function(){k(mxResources.get("searchFailed"));Va([])},R?null:v)):z(R)),Y=ia,ea=R}function N(ia){null!=Ua&&clearTimeout(Ua);13==ia.keyCode?A(xa.value):Ua=