Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
var F=0,O=0,S=I.geometry,K=mxUtils.format((J.geometry.x+3-S.x)/S.width);J=mxUtils.format((J.geometry.y+3-S.y)/S.height);0>K?(F=K*S.width,K=0):1<K&&(F=(K-1)*S.width,K=1);0>J?(O=J*S.height,J=0):1<J&&(O=(J-1)*S.height,J=1);return{x:K,y:J,dx:parseInt(F),dy:parseInt(O)}}function D(J){if(1==N.getSelectionCount()){var F=N.getSelectionCell();J&&(F.constObj=null);J=E(F);T.value=100*J.x;q.value=100*J.y;p.value=J.dx;C.value=J.dy;G.style.visibility=""}else G.style.visibility="hidden"}var z=document.createElement("div");