Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
if(0==T&&0==B)T=A,B=1;else if(Math.abs(T-A)<=(N||1==p&&E?e:0))B+=1;else if(1<B&&E){q=q.slice(0,p+1);break}else if(3<=q.length-p&&!E)B=0,l=T=0!=n?n:0,q.splice(0,0==p?1:p),p=-1;else break;0!=l||N||(T=l=A)}3==q.length&&q[1]==J&&(l=0)}e=function(Q,L,U,g){var y=[];if(g){g=z;var H=0}else g=0,H=z;y.push(new mxPoint(Q.x-g,Q.y-H));y.push(new mxPoint(Q.x+g,Q.y+H));y.push(Q);y.push(L);y.push(new mxPoint(L.x-g,L.y-H));y.push(new mxPoint(L.x+g,L.y+H));if(null!=U)return U.points=y,U;Q=new mxPolyline(y,mxConstants.GUIDE_COLOR,
mxConstants.GUIDE_STROKEWIDTH);Q.dialect=mxConstants.DIALECT_SVG;Q.pointerEvents=!1;Q.init(S.graph.getView().getOverlayPane());return Q};T=function(Q,L){if(Q&&null!=S.guidesArrHor)for(Q=0;Q<S.guidesArrHor.length;Q++)S.guidesArrHor[Q].node.style.visibility="hidden";if(L&&null!=S.guidesArrVer)for(Q=0;Q<S.guidesArrVer.length;Q++)S.guidesArrVer[Q].node.style.visibility="hidden"};if(1<B&&B==q.length-1){B=[];n=S.guidesArrHor;M=[];K=0;p=q[0]==J?1:0;E=q[p].y+q[p].height;if(0<l)for(p=0;p<q.length-1;p++)c=