Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
if(0==T&&0==G)T=F,G=1;else if(Math.abs(T-F)<=(O||1==u&&J?g:0))G+=1;else if(1<G&&J){t=t.slice(0,u+1);break}else if(3<=t.length-u&&!J)G=0,p=T=0!=q?q:0,t.splice(0,0==u?1:u),u=-1;else break;0!=p||O||(T=p=F)}3==t.length&&t[1]==I&&(p=0)}g=function(S,K,R,m){var A=[];if(m){m=C;var M=0}else m=0,M=C;A.push(new mxPoint(S.x-m,S.y-M));A.push(new mxPoint(S.x+m,S.y+M));A.push(S);A.push(K);A.push(new mxPoint(K.x-m,K.y-M));A.push(new mxPoint(K.x+m,K.y+M));if(null!=R)return R.points=A,R;S=new mxPolyline(A,mxConstants.GUIDE_COLOR,
mxConstants.GUIDE_STROKEWIDTH);S.dialect=mxConstants.DIALECT_SVG;S.pointerEvents=!1;S.init(N.graph.getView().getOverlayPane());return S};T=function(S,K){if(S&&null!=N.guidesArrHor)for(S=0;S<N.guidesArrHor.length;S++)N.guidesArrHor[S].node.style.visibility="hidden";if(K&&null!=N.guidesArrVer)for(S=0;S<N.guidesArrVer.length;S++)N.guidesArrVer[S].node.style.visibility="hidden"};if(1<G&&G==t.length-1){G=[];q=N.guidesArrHor;D=[];E=0;u=t[0]==I?1:0;J=t[u].y+t[u].height;if(0<p)for(u=0;u<t.length-1;u++)d=