Language: JavaScript
Label: safe
CWE: CWE-352 \u2014 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

Code:
                duration: Math.floor( (session.end_time.getTime() - session.start_time.getTime()) / 1000),
                status: "Answered"
            });

            // Show the call dailer after session end
            $("#callDailer").show();

            // Hide call Received
            $("#callReceiver").hide();

            // Pause Ring
            BMS.fn.pause();

            // Show the call button
            $("#callButton").show();

            // Hide the end button
            $("#hangButton").hide();

            // Stop Timer
            BMS.fn.stopTimer(window.timer);

            $("#status").html(`Dail a number!`);

            // clear case search list
            $(".caseList input[type=search]").val('');
            $(".caseList input[type=search]").trigger("keyup");

            $("#timer").fadeOut(100).fadeIn(100).fadeOut(150).fadeIn(150).fadeOut(200).fadeIn(200).fadeOut(500).fadeIn(500, function() {
                
                // Reset and hide the timer
                $("#timer").html("00:00:00");
                $("#timer").hide();

            });

        }

        // Complete the session
        completeSession();
        
    });