Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
C.x=A;C.y=x;c.push(C)}}}}return c};h.prototype.getShapeXML=function(c){var a=new mxPoint(0,0),b={str:'<shape strokewidth="inherit"><foreground>',toString:function(){return this.str}},d=b.str.length;var f=this.processGeo(c,a,b,-1,!0);f=this.processGeo(c,a,b,f,!1);if(b.str.length===d)return"";this.closePath(b,f);b.str=b.str.concat("</foreground></shape>");return b.str};h.prototype.processGeo=function(c,a,b,d,f){var k=c.getRounding(),p="";0<k&&(p=' rounded="1" arcSize="'+k*g.mxgraph.io.vsdx.mxVsdxUtils.conversionFactor+