Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
'" ');for(k=0;k<this.geomList.length;k++){var n=this.geomList[k];if(f!==n.isNoFill()){var x=n.getPathXML(a,c);0!==x.length&&(n=this.getGeoStyle(n),-1===d?b.str=b.str.concat("<path"+p+">"):d!==n&&(this.closePath(b,d),b.str=b.str.concat("<path"+p+">")),b.str=b.str.concat(x),d=n)}}return d};h.prototype.getGeoStyle=function(c){var a=0;c.isNoLine()||c.isNoFill()?c.isNoFill()?c.isNoLine()||(a=3):a=2:a=1;return a};h.prototype.closePath=function(c,a){c.str=c.str.concat("</path>");1===a?c.str=c.str.concat("<fillstroke/>"):
2===a?c.str=c.str.concat("<fill/>"):3===a&&(c.str=c.str.concat("<stroke/>"))};return h}();B.mxVsdxGeometryList=m;m.__class="com.mxgraph.io.vsdx.mxVsdxGeometryList";(function(h){var c=function(){function a(b){this.__parent=b}a.prototype.compare=function(b,d){return b.getIndex()-d.getIndex()};return a}();h.mxVsdxGeometryList$0=c;c.__interfaces=["java.util.Comparator"]})(m=B.mxVsdxGeometryList||(B.mxVsdxGeometryList={}))})(z.vsdx||(z.vsdx={}))})(y.io||(y.io={}))})(g.mxgraph||(g.mxgraph={}))})(com||(com=