Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Math.max(1,Math.min(ka,Math.max(parseInt(Ca.value),parseInt(wa.value))));wa.value=Math.max(1,Math.min(ka,Math.min(parseInt(Ca.value),parseInt(wa.value))))}function Z(X){function ea(Pa,eb,jb,ib){var mb=Pa.useCssTransforms,wb=Pa.currentTranslate,xb=Pa.currentScale,rb=Pa.view.translate,nb=Pa.view.scale;Pa.useCssTransforms&&(Pa.useCssTransforms=!1,Pa.currentTranslate=new mxPoint(0,0),Pa.currentScale=1,Pa.view.translate=new mxPoint(0,0),Pa.view.scale=1);var ub=Pa.getGraphBounds(),gb=0,tb=0,ob=L.get(),
pb=1/Pa.pageScale,hb=Ta.checked;if(hb){pb=parseInt(Ma.value);var Ab=parseInt(x.value);pb=Math.min(ob.height*Ab/(ub.height/Pa.view.scale),ob.width*pb/(ub.width/Pa.view.scale))}else pb=parseInt(Qa.value)/(100*Pa.pageScale),isNaN(pb)&&(la=1/Pa.pageScale,Qa.value="100 %");ob=mxRectangle.fromRectangle(ob);ob.width=Math.ceil(ob.width*la);ob.height=Math.ceil(ob.height*la);pb*=la;!hb&&Pa.pageVisible?(ub=Pa.getPageLayout(),gb-=ub.x*ob.width,tb-=ub.y*ob.height):hb=!0;ib=null!=ib?"page/id,"+ib:null;if(null==