Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
m.prototype.scalePoint=function(c,a){null!=c&&(c.x*=a,c.y*=a);return c};m.prototype.scaleRect=function(c,a){null!=c&&(c.x*=a,c.y*=a,c.height*=a,c.width*=a);return c};m.prototype.importNodes=function(c,a,b,d){var f=b.lastIndexOf("/"),k=b,p=b;if(-1!==f&&(k=b.substring(0,f),p=b.substring(f+1,b.length),b=function(C,J){return C[J]?C[J]:null}(d,k+"/_rels/"+p+".rels"),null!=b)){var n=b.getElementsByTagName("Relationship");b={};for(f=0;f<n.length;f++){p=n.item(f);var x=p.getAttribute("Id");p=p.getAttribute("Target");