Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
G.createVertexHandler=function(){var P=T.apply(this,arguments);P.livePreview=!1;return P};if(null!=m)try{if("inset"==m.substring(0,5)){var l=c.geometry,n=K.width,z=K.height,E=(300-n)/2,A=(300-z)/2,N=m.match(/\(([^)]+)\)/)[1].split(/[ ,]+/),Q=parseFloat(N[0]),L=parseFloat(N[1]),U=parseFloat(N[2]),g=parseFloat(N[3]);isFinite(Q)&&isFinite(L)&&isFinite(U)&&isFinite(g)?(l.x=g/100*n+E,l.y=Q/100*z+A,l.width=(100-L)/100*n+E-l.x,l.height=(100-U)/100*z+A-l.y,"round"==N[4]?"50%"==N[5]?p.setAttribute("checked",