Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
{val:"square",dispName:"Square"},{val:"rounded",dispName:"Round"},{val:"snip",dispName:"Snip"},{val:"invRound",dispName:"Inv. Round"},{val:"fold",dispName:"Fold"}]}];Na.prototype.paintVertexShape=function(c,m,u,n,t){c.translate(m,u);this.strictDrawShape(c,0,0,n,t)};Na.prototype.strictDrawShape=function(c,m,u,n,t,C){var D=C&&C.rectStyle?C.rectStyle:mxUtils.getValue(this.style,"rectStyle",this.rectStyle),ha=C&&C.absoluteCornerSize?C.absoluteCornerSize:mxUtils.getValue(this.style,"absoluteCornerSize",