Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"/pid/misc.xml"];mxStencilRegistry.libraries.pid2valves=[SHAPES_PATH+"/pid2/mxPidValves.js"];mxStencilRegistry.libraries.pidFlowSensors=[STENCIL_PATH+"/pid/flow_sensors.xml"];mxMarker.getPackageForType=function(g){var y=null;null!=g&&0<g.length&&("ER"==g.substring(0,2)?y="mxgraph.er":"sysML"==g.substring(0,5)&&(y="mxgraph.sysml"));return y};var A=mxMarker.createMarker;mxMarker.createMarker=function(g,y,H,O,P,V,R,W,X,Z){if(null!=H&&null==mxMarker.markers[H]){var Y=this.getPackageForType(H);null!=Y&&
mxStencilRegistry.getStencil(Y)}return A.apply(this,arguments)};var N=mxStencil.prototype.drawShape;mxStencil.prototype.drawShape=function(g,y,H,O,P,V){"1"==mxUtils.getValue(y.style,"lineShape",null)&&g.setFillColor(mxUtils.getValue(y.style,mxConstants.STYLE_STROKECOLOR,this.stroke));return N.apply(this,arguments)};PrintDialog.prototype.create=function(g,y){function H(){fa.value=Math.max(1,Math.min(W,Math.max(parseInt(fa.value),parseInt(ea.value))));ea.value=Math.max(1,Math.min(W,Math.min(parseInt(fa.value),