Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!c.isOfflineApp()&&isLocalStorage&&this.addMenuItem(l,"plugins",y),this.addMenuItems(l,["-","editDiagram"],y),this.addSubmenu("diagramLanguage",l,y),l.addSeparator(y),"1"!=urlParams.embed&&(isLocalStorage||mxClient.IS_CHROMEAPP)&&this.addMenuItems(l,["showStartScreen"],y),this.addMenuItems(l,["configuration"],y),l.addSeparator(y),"1"==urlParams.newTempDlg&&(c.actions.addAction("templates",function(){function G(p){return{id:p.id,isExt:!0,url:p.downloadUrl,title:p.title,imgUrl:p.thumbnailLink,changedBy:p.lastModifyingUserName,
lastModifiedOn:p.modifiedDate}}var P=new TemplatesDialog(c,function(p){console.log(arguments)},null,null,null,"user",function(p,z,I){var Q=new Date;Q.setDate(Q.getDate()-7);c.drive.listFiles(null,Q,I?!0:!1,function(N){for(var T=[],O=0;O<N.items.length;O++)T.push(G(N.items[O]));p(T)},z)},function(p,z,I,Q){c.drive.listFiles(p,null,Q?!0:!1,function(N){for(var T=[],O=0;O<N.items.length;O++)T.push(G(N.items[O]));z(T)},I)},function(p,z,I){c.drive.getFile(p.id,function(Q){z(Q.data)},I)},null,function(p){p({Test:[]},