Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"ellipsis";F.setAttribute("title",J.title+" ("+J.id+")");var O=document.createElement("input");O.setAttribute("type","checkbox");O.checked=b.sidebar.isEntryVisible(J.id);O.defaultChecked=O.checked;F.appendChild(O);mxUtils.write(F," "+J.title);z.appendChild(F);var S=function(K){if(null==K||"INPUT"!=mxEvent.getSource(K).nodeName){N.style.textAlign="center";N.style.padding="0px";N.style.color="";N.innerText="";if(null!=J.desc){var R=document.createElement("pre");R.style.boxSizing="border-box";R.style.fontFamily=
"inherit";R.style.margin="20px";R.style.right="0px";R.style.textAlign="left";mxUtils.write(R,J.desc);N.appendChild(R)}null!=J.imageCallback?J.imageCallback(N):null!=J.image?N.innerHTML+='<img border="0" style="max-width:100%;" src="'+J.image+'"/>':null==J.desc&&(N.style.padding="20px",N.style.color="rgb(179, 179, 179)",mxUtils.write(N,mxResources.get("noPreview")));null!=I&&(I.style.backgroundColor="");I=F;I.style.backgroundColor=Editor.isDarkMode()?"#000000":"#ebf2f9";null!=K&&mxEvent.consume(K)}};