Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var A=0,N=0,Q=J.geometry,L=mxUtils.format((E.geometry.x+3-Q.x)/Q.width);E=mxUtils.format((E.geometry.y+3-Q.y)/Q.height);0>L?(A=L*Q.width,L=0):1<L&&(A=(L-1)*Q.width,L=1);0>E?(N=E*Q.height,E=0):1<E&&(N=(E-1)*Q.height,E=1);return{x:L,y:E,dx:parseInt(A),dy:parseInt(N)}}function M(E){if(1==S.getSelectionCount()){var A=S.getSelectionCell();E&&(A.constObj=null);E=K(A);T.value=100*E.x;n.value=100*E.y;l.value=E.dx;z.value=E.dy;B.style.visibility=""}else B.style.visibility="hidden"}var G=document.createElement("div");