Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
d=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildNamedElements(a,"Cell"),b=0;b<d.length;b++)this.pageSheet[d[b].getAttribute("N")]=d[b];a=a.nextSibling}};h.prototype.processMasterShape=function(c,a,b){b||(this.firstLevelShapes=[]);for(c=c.firstChild;null!=c;){if(null!=c&&1==c.nodeType&&function(n,x){return n&&n.equals?n.equals(x):n===x}(c.nodeName,"Shapes"))for(var d=c.firstChild;null!=d;){if(null!=d&&1==d.nodeType&&function(n,x){return n&&n.equals?n.equals(x):n===x}(d.nodeName,"Shape")){var f=d,k=f.getAttribute("ID"),
p=new g.mxgraph.io.vsdx.Shape(f,a);this.masterShape=null==this.masterShape?p:this.masterShape;this.childShapes[k]=p;b||this.firstLevelShapes.push(p);this.processMasterShape(f,a,!0)}d=d.nextSibling}else if(null!=c&&1==c.nodeType&&"Connects"==c.nodeName)for(this.connects={},d=c.firstChild;null!=d;)null!=d&&1==d.nodeType&&"Connect"==d.nodeName&&(f=new g.mxgraph.io.vsdx.mxVsdxConnect(d),this.connects[f.getFromSheet()]=f),d=d.nextSibling;c=c.nextSibling}};h.prototype.getMasterShape=function(){return this.masterShape};