Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
I.setAttribute("FromSheet",B(T.id)),I.setAttribute("FromCell","EndX"),I.setAttribute("ToSheet",B(T.target.id)),H.appendChild(I)));L.appendChild(N);K.restore();return L}function A(H,I,L,N){H.file(I,(N?"":'<?xml version="1.0" encoding="UTF-8" standalone="yes"?>')+mxUtils.getXml(L,"\n"))}function C(H,I,L,N){var Q=mxUtils.createXmlDocument(),ha=mxUtils.createXmlDocument(),V=z(Q,M.XMLNS,"Pages");V.setAttributeNS("http://www.w3.org/2000/xmlns/","xmlns",M.XMLNS);V.setAttributeNS("http://www.w3.org/2000/xmlns/",
"xmlns:r",M.XMLNS_R);var T=z(ha,M.RELS_XMLNS,"Relationships"),W=1,oa;for(oa in I){var ca="page"+W+".xml",qa=z(Q,M.XMLNS,"Page");qa.setAttribute("ID",W-1);qa.setAttribute("NameU",oa);qa.setAttribute("Name",oa);var sa=z(Q,M.XMLNS,"PageSheet"),Fa=N[oa];sa.appendChild(h("PageWidth",Fa.pageWidth,Q));sa.appendChild(h("PageHeight",Fa.pageHeight,Q));sa.appendChild(c("PageScale",Fa.pageScale,Q));sa.appendChild(c("DrawingScale",1,Q));Fa=z(Q,M.XMLNS,"Rel");Fa.setAttributeNS(M.XMLNS_R,"r:id","rId"+W);var ka=
z(Q,M.XMLNS,"Section");ka.setAttribute("N","Layer");for(var Za=L[oa],yb=0;yb<Za.length;yb++){var vb=z(Q,M.XMLNS,"Row");vb.setAttribute("IX",yb+"");ka.appendChild(vb);vb.appendChild(c("Name",Za[yb].name,Q));vb.appendChild(c("Color","255",Q));vb.appendChild(c("Status","0",Q));vb.appendChild(c("Visible",Za[yb].visible?"1":"0",Q));vb.appendChild(c("Print","1",Q));vb.appendChild(c("Active","0",Q));vb.appendChild(c("Lock",Za[yb].locked?"1":"0",Q));vb.appendChild(c("Snap","1",Q));vb.appendChild(c("Glue",
"1",Q));vb.appendChild(c("NameUniv",Za[yb].name,Q));vb.appendChild(c("ColorTrans","0",Q))}sa.appendChild(ka);qa.appendChild(sa);qa.appendChild(Fa);V.appendChild(qa);qa=z(ha,M.RELS_XMLNS,"Relationship");qa.setAttribute("Id","rId"+W);qa.setAttribute("Type",M.PAGES_TYPE);qa.setAttribute("Target",ca);T.appendChild(qa);A(H,M.VISIO_PAGES+ca,I[oa]);W++}Q.appendChild(V);ha.appendChild(T);A(H,M.VISIO_PAGES+"pages.xml",Q);A(H,M.VISIO_PAGES+"_rels/pages.xml.rels",ha)}function J(H,I){I=M.VISIO_PAGES_RELS+"page"+