Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(c,a){var b=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(a);this.isMonotoneVariant[c]=a.hasAttribute("monotone");for(a=0;a<b.length;a++){var d=b[a];switch(d.nodeName){case "vt:varColor1":this.variantsColors[c][0]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));break;case "vt:varColor2":this.variantsColors[c][1]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));
break;case "vt:varColor3":this.variantsColors[c][2]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));break;case "vt:varColor4":this.variantsColors[c][3]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));break;case "vt:varColor5":this.variantsColors[c][4]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));
break;case "vt:varColor6":this.variantsColors[c][5]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d));break;case "vt:varColor7":this.variantsColors[c][6]=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(d))}}};h.prototype.addBkgndColor=function(c){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(c);null!=c&&(this.bkgndColor=g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(c)))};