Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
b){this.transPoint(a.targetPoint,b);this.transPoint(a.offset,b);c=a.points;if(null!=c)for(var d=0;d<c.length;d++)this.transPoint(c[d],b);this.transPoint(b,b)}return a};h.prototype.normalizeGraph=function(c){function a(C){null!=C&&(null==b?(b=C.x,d=C.y,f=C.x+(C.width||0),k=C.y+(C.height||0)):(b=Math.min(C.x,b),d=Math.min(C.y,d),f=Math.max(C.x+(C.width||0),f),k=Math.max(C.y+(C.height||0),k)))}var b,d,f,k,p;for(p in c.model.cells){var n=c.model.cells[p],x=n.geometry;if(null!=x&&1==n.parent.id)if(n.vertex)a(x);
else for(a(x.sourcePoint),a(x.targetPoint),n=x.points,x=0;null!=n&&x<n.length;x++)a(n[x])}var A={x:b,y:d};for(p in c.model.cells)if(n=c.model.cells[p],x=n.geometry,null!=x&&1==n.parent.id&&(x.x-=b,x.y-=d,n.isEdge()))for(this.transPoint(x.sourcePoint,A),this.transPoint(x.targetPoint,A),this.transPoint(x.offset,A),n=x.points,x=0;null!=n&&x<n.length;x++)this.transPoint(n[x],A);return{width:f-b,height:k-d}};h.prototype.transPoint=function(c,a){null!=c&&(c.x-=a.x,c.y-=a.y)};h.prototype.processPage=function(c,