Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!c.isOfflineApp()&&isLocalStorage&&this.addMenuItem(p,"plugins",q),this.addMenuItems(p,["-","editDiagram"],q),this.addSubmenu("diagramLanguage",p,q),p.addSeparator(q),"1"!=urlParams.embed&&(isLocalStorage||mxClient.IS_CHROMEAPP)&&this.addMenuItems(p,["showStartScreen"],q),this.addMenuItems(p,["configuration"],q),p.addSeparator(q),"1"==urlParams.newTempDlg&&(c.actions.addAction("templates",function(){function J(O){return{id:O.id,isExt:!0,url:O.downloadUrl,title:O.title,imgUrl:O.thumbnailLink,changedBy:O.lastModifyingUserName,
lastModifiedOn:O.modifiedDate}}var F=new TemplatesDialog(c,function(O){console.log(arguments)},null,null,null,"user",function(O,S,K){var R=new Date;R.setDate(R.getDate()-7);c.drive.listFiles(null,R,K?!0:!1,function(m){for(var A=[],M=0;M<m.items.length;M++)A.push(J(m.items[M]));O(A)},S)},function(O,S,K,R){c.drive.listFiles(O,null,R?!0:!1,function(m){for(var A=[],M=0;M<m.items.length;M++)A.push(J(m.items[M]));S(A)},K)},function(O,S,K){c.drive.getFile(O.id,function(R){S(R.data)},K)},null,function(O){O({Test:[]},