Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
u.style+=b(u.style,e,O,u,G);u.geometry.relative=!0;u.geometry.offset=new mxPoint(5,-12);u.vertex=!0;t.insert(u)}function Wa(u,F,D,t,e,O,r,q){e="transparent"!=u?mxConstants.STYLE_SHAPE+"=mxgraph.gcp2.":mxConstants.STYLE_SHAPE+"=";O.style="rounded=1;absoluteArcSize=1;arcSize=2;verticalAlign=bottom;fillColor=#ffffff;strokeColor=#dddddd;whiteSpace=wrap;";O.style+=b(O.style,r,q,O);O.value=m(r);O.vertex=!0;u=new mxCell(null,new mxGeometry(.5,0,.7*t*F,.7*t*D),e+u+";part=1;dashed=0;connectable=0;html=1;strokeColor=none;shadow=0;");
u.geometry.relative=!0;u.geometry.offset=new mxPoint(-F*t*.35,10+(1-D)*t*.35);u.vertex=!0;u.style+=b(u.style,r,q,u,G);O.insert(u)}function Xc(u,F){return null!=u&&null!=F&&(F==mxConstants.STYLE_ALIGN+"Global"&&(F=mxConstants.STYLE_ALIGN),u.includes(";"+F+"=")||u.substring(0,F.length+1)==F+"=")?!0:!1}function Rd(u,F){function D(t){t=Math.round(parseInt("0x"+t)*F).toString(16);return 1==t.length?"0"+t:t}return"#"+D(u.substr(1,2))+D(u.substr(3,2))+D(u.substr(5,2))}function Ie(u,F,D){var t=h(u),e=t.Properties,