Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(function(g){(function(y){(function(z){(function(B){var m=function(){function h(){this.colorElementMap={};this.fontElementMap={}}h.__static_initialize=function(){h.__static_initialized||(h.__static_initialized=!0,h.__static_initializer_0())};h.defaultColors_$LI$=function(){h.__static_initialize();null==h.defaultColors&&(h.defaultColors={});return h.defaultColors};h.__static_initializer_0=function(){h.defaultColors_$LI$()["0"]="#000000";h.defaultColors_$LI$()["1"]="#FFFFFF";h.defaultColors_$LI$()["2"]=
"#FF0000";h.defaultColors_$LI$()["3"]="#00FF00";h.defaultColors_$LI$()["4"]="#0000FF";h.defaultColors_$LI$()["5"]="#FFFF00";h.defaultColors_$LI$()["6"]="#FF00FF";h.defaultColors_$LI$()["7"]="#00FFFF";h.defaultColors_$LI$()["8"]="#800000";h.defaultColors_$LI$()["9"]="#008000";h.defaultColors_$LI$()["10"]="#000080";h.defaultColors_$LI$()["11"]="#808000";h.defaultColors_$LI$()["12"]="#800080";h.defaultColors_$LI$()["13"]="#008080";h.defaultColors_$LI$()["14"]="#C0C0C0";h.defaultColors_$LI$()["15"]="#E6E6E6";
h.defaultColors_$LI$()["16"]="#CDCDCD";h.defaultColors_$LI$()["17"]="#B3B3B3";h.defaultColors_$LI$()["18"]="#9A9A9A";h.defaultColors_$LI$()["19"]="#808080";h.defaultColors_$LI$()["20"]="#666666";h.defaultColors_$LI$()["21"]="#4D4D4D";h.defaultColors_$LI$()["22"]="#333333";h.defaultColors_$LI$()["23"]="#1A1A1A"};h.prototype.initialise=function(c,a){if(null!=c){a=c.getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.COLORS);if(0<a.length){var b=a.item(0).getElementsByTagName(g.mxgraph.io.vsdx.mxVsdxConstants.COLOR_ENTRY),