Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
h.defaultColors_$LI$()["16"]="#CDCDCD";h.defaultColors_$LI$()["17"]="#B3B3B3";h.defaultColors_$LI$()["18"]="#9A9A9A";h.defaultColors_$LI$()["19"]="#808080";h.defaultColors_$LI$()["20"]="#666666";h.defaultColors_$LI$()["21"]="#4D4D4D";h.defaultColors_$LI$()["22"]="#333333";h.defaultColors_$LI$()["23"]="#1A1A1A"};h.prototype.initialise=function(c,a){if(null!=c){a=c.getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.COLORS);if(0<a.length){var b=a.item(0).getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.COLOR_ENTRY),
d=b.length;for(a=0;a<d;a++){var f=b.item(a),k=f.getAttribute(g.mxgraph.io.vsdx.mxVsdxConstants.INDEX);f=f.getAttribute(g.mxgraph.io.vsdx.mxVsdxConstants.RGB);this.colorElementMap[k]=f}}a=c.getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.FACE_NAMES);if(0<a.length)for(c=a.item(0).getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.FACE_NAME),b=c.length,a=0;a<b;a++)k=c.item(a),d=k.getAttribute(g.mxgraph.io.vsdx.mxVsdxConstants.ID),k=k.getAttribute(g.mxgraph.io.vsdx.mxVsdxConstants.FONT_NAME),
this.fontElementMap[d]=k}};h.prototype.getColor=function(c){var a=function(b,d){return b[d]?b[d]:null}(this.colorElementMap,c);return null==a&&(a=function(b,d){return b[d]?b[d]:null}(h.defaultColors_$LI$(),c),null==a)?"":a};h.prototype.getFont=function(c){var a=this.fontElementMap;c=a[c]?a[c]:null;return null==c?"":c};return h}();m.__static_initialized=!1;B.mxPropertiesManager=m;m.__class="com.mxgraph.io.vsdx.mxPropertiesManager"})(z.vsdx||(z.vsdx={}))})(y.io||(y.io={}))})(g.mxgraph||(g.mxgraph={}))})(com||