Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.sketchMainMenuElt.appendChild(this.sketchPickerMenuElt)):(this.sketchPickerMenuElt.style.cssText="position:absolute;left:10px;border-radius:4px;padding:0px 4px 4px;white-space:nowrap;max-height:100%;z-index:1;width:48px;box-sizing:border-box;transform:translate(0, -50%);top:50%;user-select:none;",this.sketchWrapperElt.appendChild(this.sketchPickerMenuElt));mxClient.IS_POINTER&&(this.sketchPickerMenuElt.style.touchAction="none")}};EditorUi.prototype.getNetworkStatus=function(){var d=null;if(this.isOffline(!0))d=
mxResources.get("offline");else{var g=this.getCurrentFile();null!=g&&(g.invalidChecksum?d=mxResources.get("error")+": "+mxResources.get("checksum"):null==g.sync||g.sync.enabled&&g.sync.isRealtimeActive()?null==g.sync||g.sync.isConnected()?g.isRealtimeEnabled()&&g.isRealtimeSupported()&&1<g.getRealtimeState()&&(d=g.getRealtimeError(),d=mxResources.get("realtimeCollaboration")+": "+(null!=d&&null!=d.message?d.message:mxResources.get("error"))):d=mxResources.get("notConnected"):d=mxResources.get("realtimeCollaboration")+
": "+mxResources.get("disabled"))}return d};EditorUi.prototype.createMenubarForTheme=function(d){if("simple"==d||"sketch"==d){if(null==this.sketchMenubarElt){this.sketchMenubarElt=document.createElement("div");this.sketchMenubarElt.className="geToolbarContainer";if("simple"==d){this.sketchMenubarElt.style.cssText="position:relative;flex-grow:0.5;overflow:visible;"+("1"!=urlParams.embed?"flex-shrink:0;":"min-width:0;")+"display:flex;white-space:nowrap;user-select:none;justify-content:flex-end;align-items:center;flex-wrap:nowrap;gap:6px;";