Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
H);V.setAttribute("NameU","Shape"+H);V.setAttribute("LineStyle","0");V.setAttribute("FillStyle","0");V.setAttribute("TextStyle","0");H=I.width/2;var T=I.height/2;V.appendChild(h("PinX",I.x+H+(ha?0:K.shiftX),N));V.appendChild(h("PinY",Q-I.y-T-(ha?0:K.shiftY),N));V.appendChild(h("Width",I.width,N));V.appendChild(h("Height",I.height,N));V.appendChild(h("LocPinX",H,N));V.appendChild(h("LocPinY",T,N));V.appendChild(c("LayerMember",L+"",N));return V}function f(H,I){H=M.ARROWS_MAP[(null==H?"none":H)+"|"+
(null==I?"1":I)];return null!=H?H:1}function k(H){return null==H?2:2>=H?0:3>=H?1:5>=H?2:7>=H?3:9>=H?4:22>=H?5:6}function p(H,I,L,N,Q,ha){var V=L.view.getState(H,!0);if(null==V||null==V.absolutePoints||null==V.cellBounds)return null;L=z(N,M.XMLNS,"Shape");var T=B(H.id);L.setAttribute("ID",T);L.setAttribute("NameU","Dynamic connector."+T);L.setAttribute("Name","Dynamic connector."+T);L.setAttribute("Type","Shape");L.setAttribute("Master","4");var W=K.state;T=V.absolutePoints;var oa=V.cellBounds,ca=