Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
fb=Math.sqrt(ua*ua+qb*qb);D.x=(D.x+C.x)*na;D.y=(D.y+C.y)*na;t.call(this,fb,ua/fb,qb/fb,Za,I,D,ha)})},xb=function(c,m){return function(u){return[wb(u,["startWidth"],!0,function(n,t,C,D,ha){ha=mxUtils.getNumber(u.style,"startWidth",c)*u.view.scale+m;return new mxPoint(D.x+t*n/4+C*ha/2,D.y+C*n/4-t*ha/2)},function(n,t,C,D,ha,I){n=Math.sqrt(mxUtils.ptSegDistSq(D.x,D.y,ha.x,ha.y,I.x,I.y));u.style.startWidth=Math.round(2*n)/u.view.scale-m})]}},rb=function(c){return function(m){return[hb(m,["arrowWidth",