Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n.init()}else{var z=function(E){return{id:E.id,isExt:!0,url:E.downloadUrl,title:E.title,imgUrl:E.thumbnailLink,changedBy:E.lastModifyingUserName,lastModifiedOn:E.modifiedDate}};l=new TemplatesDialog(d,function(E,A,N){var Q=N.libs,L=N.clibs;d.pickFolder(d.mode,function(U){d.createFile(A,E,null!=Q&&0<Q.length?Q:null,null,function(){d.hideDialog()},null,U,null,null!=L&&0<L.length?L:null)},null==d.stateArg||null==d.stateArg.folderId)},null,null,null,"user",function(E,A,N){var Q=new Date;Q.setDate(Q.getDate()-