Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"/pid/misc.xml"];mxStencilRegistry.libraries.pid2valves=[SHAPES_PATH+"/pid2/mxPidValves.js"];mxStencilRegistry.libraries.pidFlowSensors=[STENCIL_PATH+"/pid/flow_sensors.xml"];mxMarker.getPackageForType=function(m){var A=null;null!=m&&0<m.length&&("ER"==m.substring(0,2)?A="mxgraph.er":"sysML"==m.substring(0,5)&&(A="mxgraph.sysml"));return A};var F=mxMarker.createMarker;mxMarker.createMarker=function(m,A,M,Q,U,W,P,V,X,Y){if(null!=M&&null==mxMarker.markers[M]){var Z=this.getPackageForType(M);null!=Z&&
mxStencilRegistry.getStencil(Z)}return F.apply(this,arguments)};var O=mxStencil.prototype.drawShape;mxStencil.prototype.drawShape=function(m,A,M,Q,U,W){"1"==mxUtils.getValue(A.style,"lineShape",null)&&m.setFillColor(mxUtils.getValue(A.style,mxConstants.STYLE_STROKECOLOR,this.stroke));return O.apply(this,arguments)};PrintDialog.prototype.create=function(m,A){function M(){ba.value=Math.max(1,Math.min(V,Math.max(parseInt(ba.value),parseInt(da.value))));da.value=Math.max(1,Math.min(V,Math.min(parseInt(ba.value),