Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(p=f.indexOf(g.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID),0<=p)){p+=g.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID.length+1;var n=parseInt(f.substring(p,f.indexOf(";",p)));a:{f=this.vertexShapeMap;p=new g.mxgraph.io.vsdx.ShapePageId(a.getId(),n);null==f.entries&&(f.entries=[]);for(var x=0;x<f.entries.length;x++)if(null!=f.entries[x].key.equals&&f.entries[x].key.equals(p)||f.entries[x].key===p){f=f.entries[x].value;break a}f=null}null!=f&&(k=f.getName())}d=d.concat(k);d=d.concat('"}');f=","}}this.RESPONSE_DIAGRAM_START=