Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
J.translate(Math.floor((1-q.x)/C),Math.floor((1-q.y)/C));J.scale(1/C);var O=0,S=J.save;J.save=function(){O++;S.apply(this,arguments)};var K=J.restore;J.restore=function(){O--;K.apply(this,arguments)};var R=p.drawShape;p.drawShape=function(m){mxLog.debug("entering shape",m,O);R.apply(this,arguments);mxLog.debug("leaving shape",m,O)};p.drawState(k.getView().getState(k.model.root),J);mxLog.show();mxLog.debug(mxUtils.getXml(F));mxLog.debug("stateCounter",O)}));c.actions.addAction("testShowConsole",function(){mxLog.isVisible()?