Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N;for(N in L)if(1<I&&N==M.CONTENT_TYPES_XML){for(var Q=mxUtils.parseXml(L[N]),ha=Q.documentElement,V=ha.children,T=null,W=0;W<V.length;W++){var oa=V[W];"/visio/pages/page1.xml"==oa.getAttribute(M.PART_NAME)&&(T=oa)}for(W=2;W<=I;W++)V=T.cloneNode(),V.setAttribute(M.PART_NAME,"/visio/pages/page"+W+".xml"),ha.appendChild(V);A(H,N,Q,!0)}else H.file(N,L[N])}function z(H,I,L){return null!=H.createElementNS?H.createElementNS(I,L):H.createElement(L)}function B(H){var I=P[H];null==I&&(I=R++,P[H]=I);return I}