Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
A&&(A=0);return n.substr(A,x.length)===x}(c[k]?c[k]:null,"rounded="))try{b=b+k+a}catch(n){}b=b+p+";"}return b};h.surroundByTags=function(c,a,b){return"<"+a+(b?' style="'+b+'"':"")+">"+c+"</"+a+">"};h.htmlEntities=function(c){return c.replace(RegExp("&","g"),"&amp;").replace(RegExp('"',"g"),"&quot;").replace(RegExp("'","g"),"&prime;").replace(RegExp("<","g"),"&lt;").replace(RegExp(">","g"),"&gt;")};h.toInitialCapital=function(c){c=c.split(" ");for(var a="",b=0;b<c.length;b++){var d=c[b],f=d.substring(0,
1);d=d.substring(1);f=f.toUpperCase();a+=f+d}return a.substring(0,a.length)};h.toSmallCaps=function(c,a){var b="",d=b;if(a&&a.equals?a.equals(d):a===d)b=c;else for(c=c.split(""),d=0;d<c.length;d++){var f=c[d];(null==f.charCodeAt?f:f.charCodeAt(0))>=(null=="a".charCodeAt?"a":97)&&(null==f.charCodeAt?f:f.charCodeAt(0))<=(null=="z".charCodeAt?"z":122)?(f=(new String(f)).toString(),f=f.toUpperCase(),b+='<font style="font-size:'+parseFloat(a)/1.28+'px">'+f+"</font>"):b+=f}return b};h.getStyleMap=function(c,