Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
oa.width/2,qa=oa.height/2;L.appendChild(h("PinX",oa.x+ca+(ha?0:K.shiftX),N));L.appendChild(h("PinY",Q-oa.y-qa-(ha?0:K.shiftY),N));L.appendChild(h("Width",oa.width,N));L.appendChild(h("Height",oa.height,N));L.appendChild(h("LocPinX",ca,N));L.appendChild(h("LocPinY",qa,N));K.newEdge(L,V,N);ca=function(sa,Fa,ka){var Za=sa.x;sa=sa.y;Za=Za*W.scale-oa.x+W.dx+(ka||ha?0:K.shiftX);sa=(Fa?0:oa.height)-sa*W.scale+oa.y-W.dy-(ka||ha?0:K.shiftY);return{x:Za,y:sa}};qa=ca(T[0],!0);L.appendChild(h("BeginX",oa.x+qa.x,