Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
A.str.concat('","w":');A.str=A.str.concat(H.width);A.str=A.str.concat(',"h":');A.str=A.str.concat(H.height);A.str=A.str.concat(',"title":');P=P.getName();null==P&&(P="");P=mxUtils.htmlEntities(JSON.stringify(P));A.str=A.str.concat(P);A.str=A.str.concat("}");C=","}};for(var M=f,K=0;K<J.length;K++)p(K);k=k.concat(A)}k=k.concat("]</mxlibrary>");if(a)try{a(k)}catch(P){null!=d?d(P):a("")}},b)};h.prototype.normalizeGeo=function(c){var a=c.getGeometry();a.x=0;a.y=0;var b=a.sourcePoint;if(c.isEdge()&&null!=
b){this.transPoint(a.targetPoint,b);this.transPoint(a.offset,b);c=a.points;if(null!=c)for(var d=0;d<c.length;d++)this.transPoint(c[d],b);this.transPoint(b,b)}return a};h.prototype.normalizeGraph=function(c){function a(C){null!=C&&(null==b?(b=C.x,d=C.y,f=C.x+(C.width||0),k=C.y+(C.height||0)):(b=Math.min(C.x,b),d=Math.min(C.y,d),f=Math.max(C.x+(C.width||0),f),k=Math.max(C.y+(C.height||0),k)))}var b,d,f,k,p;for(p in c.model.cells){var n=c.model.cells[p],x=n.geometry;if(null!=x&&1==n.parent.id)if(n.vertex)a(x);