Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(Ia&&(fb=new mxPoint(fb.x+I*Ja,fb.y+ua*Ja),t.push(fb)),fb=new mxPoint(fb.x+na*Ga,fb.y+Za*Ga)):(Ia&&(fb=new mxPoint(fb.x+na*Ga,fb.y+Za*Ga),t.push(fb)),fb=new mxPoint(fb.x+I*Ja,fb.y+ua*Ja));t.push(fb)};var fb=ha;null==n&&(n=new mxPoint(ha.x+(D.x-ha.x)/2,ha.y+(D.y-ha.y)/2));c(n.x,n.y,!0);c(D.x,D.y,!1)}};mxStyleRegistry.putValue("isometricEdgeStyle",mxEdgeStyle.IsometricConnector);var Cb=Graph.prototype.createEdgeHandler;Graph.prototype.createEdgeHandler=function(c,m){if(m==mxEdgeStyle.IsometricConnector){var u=
new mxElbowEdgeHandler(c);u.snapToTerminals=!1;return u}return Cb.apply(this,arguments)};E.prototype.constraints=[];M.prototype.getConstraints=function(c,m,u){c=[];var n=Math.tan(mxUtils.toRadians(30)),t=(.5-n)/2;n=Math.min(m,u/(.5+n));m=(m-n)/2;u=(u-n)/2;c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m,u+.25*n));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m+.5*n,u+n*t));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m+n,u+.25*n));c.push(new mxConnectionConstraint(new mxPoint(0,