Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
J)):null;var M=!0;if(null==J||0==J.geometry.width||0==J.geometry.height)J=c.insertVertex(p,null,null,Math.floor(Math.round(100*x.x)/100),Math.floor(Math.round(100*x.y)/100),0,0);else if(J.style&&-1==J.style.indexOf(";rotation=")){C=m.calculateAbsolutePoint(J);var K=m.calculateAbsolutePoint(p),P=J.geometry;C=new mxPoint((K.x+x.x-C.x)/P.width,(K.y+x.y-C.y)/P.height)}else M=!1;x=null;a=a.getTargetToSheet();a=null!=a?function(I,L){null==I.entries&&(I.entries=[]);for(var N=0;N<I.entries.length;N++)if(null!=
I.entries[N].key.equals&&I.entries[N].key.equals(L)||I.entries[N].key===L)return I.entries[N].value;return null}(this.vertexMap,new g.mxgraph.io.vsdx.ShapePageId(b,a)):null;K=!0;null==a||0==a.geometry.width||0==a.geometry.height?a=c.insertVertex(p,null,null,Math.floor(Math.round(100*A.x)/100),Math.floor(Math.round(100*A.y)/100),0,0):a.style&&-1==a.style.indexOf(";rotation=")?(b=m.calculateAbsolutePoint(a),x=m.calculateAbsolutePoint(p),P=a.geometry,x=new mxPoint((x.x+A.x-b.x)/P.width,(x.y+A.y-b.y)/