Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0>ra&&(ra=U.strokeWidth/2);l.setStrokeAlpha(l.state.fillAlpha);l.setStrokeColor(U.fill||"");l.setStrokeWidth(ra);l.setDashed(!1);this._drawToContext(N,Z,U);l.setDashed(qa);l.setStrokeWidth(Y);l.setStrokeColor(aa);l.setStrokeAlpha(ka)};B._drawToContext=function(N,Z,U){N.begin();for(var aa=0;aa<Z.ops.length;aa++){var Y=Z.ops[aa],ka=Y.data;switch(Y.op){case "move":N.moveTo(ka[0],ka[1]);break;case "bcurveTo":N.curveTo(ka[0],ka[1],ka[2],ka[3],ka[4],ka[5]);break;case "lineTo":N.lineTo(ka[0],ka[1])}}N.end();
"fillPath"===Z.type&&U.filled?N.fill():N.stroke()};return B};(function(){function l(aa,Y,ka){this.canvas=aa;this.rc=Y;this.shape=ka;this.canvas.setLineJoin("round");this.canvas.setLineCap("round");this.originalBegin=this.canvas.begin;this.canvas.begin=mxUtils.bind(this,l.prototype.begin);this.originalEnd=this.canvas.end;this.canvas.end=mxUtils.bind(this,l.prototype.end);this.originalRect=this.canvas.rect;this.canvas.rect=mxUtils.bind(this,l.prototype.rect);this.originalRoundrect=this.canvas.roundrect;