Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
arguments);u()};u();var J=document.createElement("canvas");J.width=S.offsetWidth;J.height=S.offsetHeight;S.style.overflow="hidden";J.style.position="relative";S.appendChild(J);var c=J.getContext("2d");this.ui=b;var e=b.editor.graph;this.graph=e;this.container=S;this.canvas=J;var k=function(x,C,I,B,T){x=Math.round(x);C=Math.round(C);I=Math.round(I);B=Math.round(B);c.beginPath();c.moveTo(x+.5,C+.5);c.lineTo(I+.5,B+.5);c.stroke();T&&(m?(c.save(),c.translate(x,C),c.rotate(-Math.PI/2),c.fillText(T,0,0),
c.restore()):c.fillText(T,x,C))},q=function(){c.clearRect(0,0,J.width,J.height);c.beginPath();c.lineWidth=.7;c.strokeStyle=G.strokeClr;c.setLineDash([]);c.font="9px Arial";c.textAlign="center";var x=e.view.scale,C=e.view.getBackgroundPageBounds(),I=e.view.translate,B=e.pageVisible;I=B?K+(m?C.y-e.container.scrollTop:C.x-e.container.scrollLeft):K+(m?I.y*x-e.container.scrollTop:I.x*x-e.container.scrollLeft);var T=0;B&&(T=e.getPageLayout(),T=m?T.y*e.pageFormat.height:T.x*e.pageFormat.width);var l;switch(M.unit){case mxConstants.POINTS:var n=