Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
a),this.scalePoint(f.targetPoint,a),this.scalePoint(f.offset,a),d=f.points,null!=d)))for(f=0;f<d.length;f++)this.scalePoint(d[f],a)}}};m.incorrectXMLReqExp=[{regExp:/&(?!amp;|lt;|gt;|quot;|#)/g,repl:"&amp;"}];m.prototype.decodeVsdx=function(c,a,b,d){var f=this,k={},p={},n=function(){function J(){R=R.concat(f.RESPONSE_END);a&&a(R)}for(var M=m.vsdxPlaceholder+"/document.xml",K=k[M]?k[M]:null,P=K.firstChild;null!=P&&1!=P.nodeType;)P=P.nextSibling;if(null!=P&&1==P.nodeType)f.importNodes(K,P,M,k);else return null;