Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
p=new g.mxgraph.io.vsdx.Shape(f,a);this.masterShape=null==this.masterShape?p:this.masterShape;this.childShapes[k]=p;b||this.firstLevelShapes.push(p);this.processMasterShape(f,a,!0)}d=d.nextSibling}else if(null!=c&&1==c.nodeType&&"Connects"==c.nodeName)for(this.connects={},d=c.firstChild;null!=d;)null!=d&&1==d.nodeType&&"Connect"==d.nodeName&&(f=new g.mxgraph.io.vsdx.mxVsdxConnect(d),this.connects[f.getFromSheet()]=f),d=d.nextSibling;c=c.nextSibling}};h.prototype.getMasterShape=function(){return this.masterShape};