Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=d)f||b.hideDialog(),d(za,Ca,O.value);else if(c)f||b.hideDialog(),c(ma,O.value,Ba,da);else{var aa=O.value;null!=aa&&0<aa.length&&b.pickFolder(b.mode,function(la){b.createFile(aa,ma,null!=da&&0<da.length?da:null,null,function(){b.hideDialog()},null,la,null,null!=ba&&0<ba.length?ba:null)},b.mode!=App.MODE_GOOGLE||null==b.stateArg||null==b.stateArg.folderId)}}function G(aa,la,na,pa,ha,ka,ua){null!=ea&&(ea.style.backgroundColor="transparent",ea.style.border="1px solid transparent");R.removeAttribute("disabled");
ma=la;da=na;ba=ka;ea=aa;za=pa;Ba=ua;Ca=ha;ea.style.backgroundColor=y;ea.style.border=E}function T(aa,la,na,pa,ha,ka,ua,wa,Ma,Ia,Aa){function Ja(Oa,Ya){null==Ha?(La=Oa,La=/^https?:\/\//.test(La)&&!b.editor.isCorsEnabledForUrl(La)?PROXY_URL+"?url="+encodeURIComponent(La):TEMPLATE_PATH+"/"+La,mxUtils.get(La,mxUtils.bind(this,function(Wa){200<=Wa.getStatus()&&299>=Wa.getStatus()&&(Ha=Wa.getText());Ya(Ha,La)}))):Ya(Ha,La)}function Na(Oa,Ya){if(null==aa||A||b.sidebar.currentElt==ra)b.sidebar.hideTooltip();