Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
"fillIdx");this.variantLineIdx[d][p]=g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(x,"lineIdx");this.variantEffectIdx[d][p]=g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(x,"effectIdx");this.variantFontIdx[d][p]=g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(x,"fontIdx");p++}d++}}}};h.prototype.fillFontStyles=function(c,a,b){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(c);for(var d=0;d<c.length;d++){var f=
c[d];b.push(g.mxgraph.io.vsdx.mxVsdxUtils.getIntAttr$org_w3c_dom_Element$java_lang_String(f,"style"));f=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(f);null!=f&&a.push(g.mxgraph.io.vsdx.theme.OoxmlColorFactory.getOoxmlColor(g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(f)))}};h.prototype.processFormats=function(c){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(c);for(var a=0;a<c.length;a++){var b=c[a];switch(b.nodeName){case "a:fillStyleLst":b=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(b);