Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxVsdxCanvas2D.prototype.lineTo=function(g,y){this.lastX=g;this.lastY=y;var z=this.xmGeo,B=this.state;g=(g-z.x+B.dx)*B.scale;y=(z.height-y+z.y-B.dy)*B.scale;var m=z.height*B.scale;z=z.width*B.scale;this.geoSec.appendChild(this.createRowRel("RelLineTo",this.geoStepIndex++,g/z,y/m))};