Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
for(var d=0;d<b.length;d++)this.fillStyles.push(g.mxgraph.io.vsdx.theme.FillStyleFactory.getFillStyle(b[d]));break;case "a:lnStyleLst":for(b=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(b),d=0;d<b.length;d++)this.lineStyles.push(new g.mxgraph.io.vsdx.theme.LineStyle(b[d]))}}};h.prototype.processFonts=function(c){};h.prototype.processColors=function(c){for(c=c.firstChild;null!=c;){if(null!=c&&1==c.nodeType){var a=c,b=a.nodeName;a=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(a);var d=
(d=b)&&d.equals?d.equals("a:extLst"):"a:extLst"===d;d?3===a.length&&(0>this.themeIndex&&this.extractThemeIndex(a[0]),this.addBkgndColor(a[1]),this.addVariantColors(a[2])):(b=b.substring(2),0<a.length&&this.addBasicColor(b,a[0]))}c=c.nextSibling}};h.prototype.addVariantColors=function(c){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(c);if(null!=c){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(c);for(var a=0,b=0;b<c.length;b++){var d=c[b];this.addVariantColorsSet(a++,d)}}};h.prototype.addVariantColorsSet=