Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.bind(this,function(){function l(Q){return null==Q||null==Q.boundingBox||!isNaN(Q.boundingBox.x)&&!isNaN(Q.boundingBox.y)&&!isNaN(Q.boundingBox.width)&&!isNaN(Q.boundingBox.height)}var n=u.getGraphBounds(),z=u.view.translate,E=u.view.scale;u.insertVertex(u.getDefaultParent(),null,"",n.x/E-z.x,n.y/E-z.y,n.width/E,n.height/E,"fillColor=none;strokeColor=red;");var A=0,N=0;u.view.states.visit(function(Q,L){Q=!0;l(L.shape)||(console.log("invalid shape",L.cell.id,L.shape),Q=!1);l(L.text)||(console.log("invalid text",