Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
n;n=a.getOriginPoint(f,!0);if(x)n=c.insertVertex(b,null,null,Math.floor(Math.round(100*n.x)/100),Math.floor(Math.round(100*n.y)/100),Math.floor(Math.round(100*k.x)/100),Math.floor(Math.round(100*k.y)/100),A);else{var J=a.getTextLabel();n=c.insertVertex(b,null,J,Math.floor(Math.round(100*n.x)/100),Math.floor(Math.round(100*n.y)/100),Math.floor(Math.round(100*k.x)/100),Math.floor(Math.round(100*k.y)/100),A)}b=n.geometry.height;for(C=function(K){var P=0;return{next:function(){return P<K.length?K[P++]:
null},hasNext:function(){return P<K.length}}}(function(K){null==K.entries&&(K.entries=[]);return K.entries}(C));C.hasNext();)if(A=C.next().getValue(),J=A.getId(),A.isVertex()){var M=g.mxgraph.io.vsdx.VsdxShape.getType(A.getShape());null!=M&&(function(K,P){return K&&K.equals?K.equals(P):K===P}(M,g.mxgraph.io.vsdx.mxVsdxConstants.TYPE_SHAPE)||function(K,P){return K&&K.equals?K.equals(P):K===P}(M,g.mxgraph.io.vsdx.mxVsdxConstants.TYPE_GROUP)||function(K,P){return K&&K.equals?K.equals(P):K===P}(M,g.mxgraph.io.vsdx.mxVsdxConstants.FOREIGN))&&