Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Editor.createRoughCanvas=function(g){var y=rough.canvas({getContext:function(){return g}});y.draw=function(H){var O=H.sets||[];H=H.options||this.getDefaultOptions();for(var P=0;P<O.length;P++){var V=O[P];switch(V.type){case "path":null!=H.stroke&&this._drawToContext(g,V,H);break;case "fillPath":this._drawToContext(g,V,H);break;case "fillSketch":this.fillSketch(g,V,H)}}};y.fillSketch=function(H,O,P){var V=g.state.strokeColor,R=g.state.strokeWidth,W=g.state.strokeAlpha,X=g.state.dashed,Z=P.fillWeight;