Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
k.x,g.y+=k.y))),null!=g&&null!=f.offset&&(g.x+=f.offset.x,g.y+=f.offset.y),f=this.getCurrentCellStyle(a[e]),null!=g&&(f=mxUtils.getValue(f,mxConstants.STYLE_ROTATION,0),0!=f&&(g=mxUtils.getBoundingBox(g,f)));null!=g&&(null==d?d=mxRectangle.fromRectangle(g):d.add(g))}}return d};mxGraph.prototype.refresh=function(a){this.view.clear(a,null==a);this.view.validate();this.sizeDidChange();this.fireEvent(new mxEventObject(mxEvent.REFRESH))};