Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0,c.width-parseFloat(mxUtils.getValue(this.style,"width",this.width)*this.scale),c.height-parseFloat(mxUtils.getValue(this.style,"height",this.height)*this.scale))};Y.prototype.paintBackground=function(c,m,u,n,t){var C=this.corner,D=Math.min(n,Math.max(C,parseFloat(mxUtils.getValue(this.style,"width",this.width)))),ha=Math.min(t,Math.max(1.5*C,parseFloat(mxUtils.getValue(this.style,"height",this.height)))),I=mxUtils.getValue(this.style,mxConstants.STYLE_SWIMLANE_FILLCOLOR,mxConstants.NONE);I!=mxConstants.NONE&&
(c.setFillColor(I),c.rect(m,u,n,t),c.fill());null!=this.fill&&this.fill!=mxConstants.NONE&&this.gradient&&this.gradient!=mxConstants.NONE?(this.getGradientBounds(c,m,u,n,t),c.setGradient(this.fill,this.gradient,m,u,n,t,this.gradientDirection)):c.setFillColor(this.fill);c.pointerEvents=!0;c.begin();c.moveTo(m,u);c.lineTo(m+D,u);c.lineTo(m+D,u+Math.max(0,ha-1.5*C));c.lineTo(m+Math.max(0,D-C),u+ha);c.lineTo(m,u+ha);c.close();c.fillAndStroke();this.configurePointerEvents(c);c.begin();c.moveTo(m+D,u);
c.lineTo(m+n,u);c.lineTo(m+n,u+t);c.lineTo(m,u+t);c.lineTo(m,u+ha);c.stroke()};mxCellRenderer.registerShape("umlFrame",Y);mxPerimeter.CenterPerimeter=function(c,m,u,n){return new mxPoint(c.getCenterX(),c.getCenterY())};mxStyleRegistry.putValue("centerPerimeter",mxPerimeter.CenterPerimeter);mxPerimeter.LifelinePerimeter=function(c,m,u,n){n=aa.prototype.size;null!=m&&(n=mxUtils.getValue(m.style,"size",n)*m.view.scale);m=parseFloat(m.style[mxConstants.STYLE_STROKEWIDTH]||1)*m.view.scale/2-1;u.x<c.getCenterX()&&