Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this);this.stylesheets[f]=d}}for(c=function(k){var p=0;return{next:function(){return p<k.length?k[p++]:null},hasNext:function(){return p<k.length}}}(function(k){return Object.keys(k).map(function(p){return k[p]})}(this.stylesheets));c.hasNext();)d=c.next(),d.stylesheetRefs(this)};h.prototype.initMasters=function(){if(null!=this.xmlDocs){var c=function(b,d){return b[d]?b[d]:null}(this.xmlDocs,g.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+"/masters/masters.xml");if(null!=c)for(c=c.firstChild;null!=c;){if(null!=
c&&1==c.nodeType&&function(b,d){return b&&b.equals?b.equals(d):b===d}(c.tagName,g.mxgraph.io.vsdx.mxVsdxConstants.MASTERS)){for(c=c.firstChild;null!=c;){if(null!=c&&1==c.nodeType&&function(b,d){return b&&b.equals?b.equals(d):b===d}(c.tagName,"Master")){var a=new g.mxgraph.io.vsdx.mxVsdxMaster(c,this);this.masters[a.getId()]=a}c=c.nextSibling}break}c=c.nextSibling}}};h.prototype.initPages=function(){if(null!=this.xmlDocs){var c=function(k,p){return k[p]?k[p]:null}(this.xmlDocs,g.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+