Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function m(H){var I={};try{var L=H.getGraphBounds().clone(),N=H.view.scale,Q=H.view.translate,ha=Math.round(L.x/N)-Q.x,V=Math.round(L.y/N)-Q.y,T=H.pageFormat.width,W=H.pageFormat.height;0>ha&&(ha+=Math.ceil((Q.x-L.x/N)/T)*T);0>V&&(V+=Math.ceil((Q.y-L.y/N)/W)*W);var oa=Math.max(1,Math.ceil((L.width/N+ha)/T)),ca=Math.max(1,Math.ceil((L.height/N+V)/W));I.gridEnabled=H.gridEnabled;I.gridSize=H.gridSize;I.guidesEnabled=H.graphHandler.guidesEnabled;I.pageVisible=H.pageVisible;I.pageScale=H.pageScale;I.pageWidth=
H.pageFormat.width*oa;I.pageHeight=H.pageFormat.height*ca;I.backgroundClr=H.background;I.mathEnabled=H.mathEnabled;I.shadowVisible=H.shadowVisible}catch(qa){}return I}function h(H,I,L,N){return c(H,I/M.CONVERSION_FACTOR,L,N)}function c(H,I,L,N){L=z(L,M.XMLNS,"Cell");L.setAttribute("N",H);L.setAttribute("V",I);N&&L.setAttribute("F",N);return L}function a(H,I,L,N,Q){var ha=z(Q,M.XMLNS,"Row");ha.setAttribute("T",H);ha.setAttribute("IX",I);ha.appendChild(h("X",L,Q));ha.appendChild(h("Y",N,Q));return ha}