Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
else for(a(x.sourcePoint),a(x.targetPoint),n=x.points,x=0;null!=n&&x<n.length;x++)a(n[x])}var A={x:b,y:d};for(p in c.model.cells)if(n=c.model.cells[p],x=n.geometry,null!=x&&1==n.parent.id&&(x.x-=b,x.y-=d,n.isEdge()))for(this.transPoint(x.sourcePoint,A),this.transPoint(x.targetPoint,A),this.transPoint(x.offset,A),n=x.points,x=0;null!=n&&x<n.length;x++)this.transPoint(n[x],A);return{width:f-b,height:k-d}};h.prototype.transPoint=function(c,a){null!=c&&(c.x-=a.x,c.y-=a.y)};h.prototype.processPage=function(c,
a){var b=c.getModel(),d="",f="";for(n in b.cells){var k=b.cells[n];if(c.getDefaultParent()===b.getParent(k)){d=d.concat(f);d=d.concat('{"xml":"');var p=this.createMxGraph();p.addCell(k);this.sanitiseGraph(p);if(0===p.getModel().getChildCount(p.getDefaultParent()))return"continue";f=this.normalizeGeo(k);p=m.prototype.processPage.call(this,p,null);d=d.concat(p);d=d.concat('","w":');d=d.concat(f.width);d=d.concat(',"h":');d=d.concat(f.height);d=d.concat(',"title":"');f=b.getStyle(k);k="";if(null!=f&&
(p=f.indexOf(g.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID),0<=p)){p+=g.mxgraph.io.vsdx.mxVsdxConstants.VSDX_ID.length+1;var n=parseInt(f.substring(p,f.indexOf(";",p)));a:{f=this.vertexShapeMap;p=new g.mxgraph.io.vsdx.ShapePageId(a.getId(),n);null==f.entries&&(f.entries=[]);for(var x=0;x<f.entries.length;x++)if(null!=f.entries[x].key.equals&&f.entries[x].key.equals(p)||f.entries[x].key===p){f=f.entries[x].value;break a}f=null}null!=f&&(k=f.getName())}d=d.concat(k);d=d.concat('"}');f=","}}this.RESPONSE_DIAGRAM_START=
0<d.length?",":"";return d};return h}(g.mxgraph.io.mxVsdxCodec);z.mxVssxCodec=B;B.__class="com.mxgraph.io.mxVssxCodec"})(y.io||(y.io={}))})(g.mxgraph||(g.mxgraph={}))})(com||(com={}));