Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxUtils.getValue(this.style,"line")?(c.moveTo(m+n/2,u),c.lineTo(m+n/2,u+t)):(c.moveTo(m,u+t/2),c.lineTo(m+n,u+t/2));c.end();c.stroke()};mxCellRenderer.registerShape("lineEllipse",va);mxUtils.extend(Fa,mxActor);Fa.prototype.redrawPath=function(c,m,u,n,t){m=Math.min(n,t/2);c.moveTo(0,0);c.lineTo(n-m,0);c.quadTo(n,0,n,t/2);c.quadTo(n,t,n-m,t);c.lineTo(0,t);c.close();c.end()};mxCellRenderer.registerShape("delay",Fa);mxUtils.extend(Ua,mxActor);Ua.prototype.size=.2;Ua.prototype.redrawPath=function(c,m,
u,n,t){m=Math.min(t,n);var C=Math.max(0,Math.min(m,m*parseFloat(mxUtils.getValue(this.style,"size",this.size))));m=(t-C)/2;u=m+C;var D=(n-C)/2;C=D+C;c.moveTo(0,m);c.lineTo(D,m);c.lineTo(D,0);c.lineTo(C,0);c.lineTo(C,m);c.lineTo(n,m);c.lineTo(n,u);c.lineTo(C,u);c.lineTo(C,t);c.lineTo(D,t);c.lineTo(D,u);c.lineTo(0,u);c.close();c.end()};mxCellRenderer.registerShape("cross",Ua);mxUtils.extend(ab,mxActor);ab.prototype.size=.25;ab.prototype.redrawPath=function(c,m,u,n,t){m=Math.min(n,t/2);u=Math.min(n-