Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
c.firstChild;null!=c;c=c.nextSibling)null!=c&&1==c.nodeType&&a.push(c);return a};h.getDirectFirstChildElement=function(c){for(c=c.firstChild;null!=c;c=c.nextSibling)if(null!=c&&1==c.nodeType)return c;return null};h.getIntAttr$org_w3c_dom_Element$java_lang_String$int=function(c,a,b){try{var d=c.getAttribute(a);if(null!=d)return parseInt(d)}catch(f){}return b};h.getIntAttr=function(c,a,b){if((null==c||1!=c.nodeType)&&null!==c||"string"!==typeof a&&null!==a||"number"!==typeof b&&null!==b){if((null==
c||1!=c.nodeType)&&null!==c||"string"!==typeof a&&null!==a||void 0!==b)throw Error("invalid overload");return g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(c,a)}return g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String$int(c,a,b)};h.getIntAttr$org_w3c_dom_Element$java_lang_String=function(c,a){return h.getIntAttr$org_w3c_dom_Element$java_lang_String$int(c,a,0)};h.getStyleString=function(c,a){for(var b="",d=function(n){var x=0;return{next:function(){return x<