Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n)/c.view.scale-u})},wb=function(c,m,u,n,t){return hb(c,m,function(C){var D=c.absolutePoints;if(null!=D&&0<D.length){var ha=D.length-1;C=c.view.translate;var I=c.view.scale,ua=u?D[0]:D[ha];D=u?D[1]:D[ha-1];ha=D.x-ua.x;var na=D.y-ua.y,Za=Math.sqrt(ha*ha+na*na);ua=n.call(this,Za,ha/Za,na/Za,ua,D);return new mxPoint(ua.x/I-C.x,ua.y/I-C.y)}return null},function(C,D,ha){var I=c.absolutePoints,ua=I.length-1;C=c.view.translate;var na=c.view.scale,Za=u?I[0]:I[ua];I=u?I[1]:I[ua-1];ua=I.x-Za.x;var qb=I.y-Za.y,
fb=Math.sqrt(ua*ua+qb*qb);D.x=(D.x+C.x)*na;D.y=(D.y+C.y)*na;t.call(this,fb,ua/fb,qb/fb,Za,I,D,ha)})},xb=function(c,m){return function(u){return[wb(u,["startWidth"],!0,function(n,t,C,D,ha){ha=mxUtils.getNumber(u.style,"startWidth",c)*u.view.scale+m;return new mxPoint(D.x+t*n/4+C*ha/2,D.y+C*n/4-t*ha/2)},function(n,t,C,D,ha,I){n=Math.sqrt(mxUtils.ptSegDistSq(D.x,D.y,ha.x,ha.y,I.x,I.y));u.style.startWidth=Math.round(2*n)/u.view.scale-m})]}},rb=function(c){return function(m){return[hb(m,["arrowWidth",