Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
e.addListener(mxEvent.SIZE,f);e.container.addEventListener("scroll",d);e.view.addListener("unitChanged",this.unitListener);b.addListener("pageViewChanged",this.pageListener);b.addListener("pageScaleChanged",this.pageListener);b.addListener("pageFormatChanged",this.pageListener);this.setStyle=function(x){G=x;S.style.background=G.bkgClr;q()};this.origGuideMove=mxGuide.prototype.move;mxGuide.prototype.move=function(x,C,I,B){if(m&&4<x.height||!m&&4<x.width){if(null!=M.guidePart)try{c.putImageData(M.guidePart.imgData1,
M.guidePart.x1,M.guidePart.y1),c.putImageData(M.guidePart.imgData2,M.guidePart.x2,M.guidePart.y2),c.putImageData(M.guidePart.imgData3,M.guidePart.x3,M.guidePart.y3)}catch(g){}var T=M.origGuideMove.apply(this,arguments);try{c.lineWidth=.5;c.strokeStyle=G.guideClr;c.setLineDash([2]);if(m){var l=x.y+T.y+K-this.graph.container.scrollTop;var n=0;var z=l+x.height/2;var E=K/2;var A=l+x.height;var N=0;var Q=c.getImageData(n,l-1,K,3);k(n,l,K,l);l--;var L=c.getImageData(E,z-1,K,3);k(E,z,K,z);z--;var U=c.getImageData(N,
A-1,K,3);k(N,A,K,A);A--}else l=0,n=x.x+T.x+K-this.graph.container.scrollLeft,z=K/2,E=n+x.width/2,A=0,N=n+x.width,Q=c.getImageData(n-1,l,3,K),k(n,l,n,K),n--,L=c.getImageData(E-1,z,3,K),k(E,z,E,K),E--,U=c.getImageData(N-1,A,3,K),k(N,A,N,K),N--;if(null==M.guidePart||M.guidePart.x1!=n||M.guidePart.y1!=l)M.guidePart={imgData1:Q,x1:n,y1:l,imgData2:L,x2:E,y2:z,imgData3:U,x3:N,y3:A}}catch(g){}}else T=M.origGuideMove.apply(this,arguments);return T};this.origGuideDestroy=mxGuide.prototype.destroy;mxGuide.prototype.destroy=