Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
b.container.style.cursor=z?"crosshair":"";b.fireEvent(new mxEventObject("freehandStateChanged"))};this.startDrawing=function(){x(!0)};this.isDrawing=function(){return e};var C=mxUtils.bind(this,function(z){if(d){var E=F.length,A=k&&0<D.length&&null!=F&&2>F.length;A||D.push.apply(D,F);F=[];D.push(null);u.push(d);d=null;(A||G)&&this.stopDrawing();G&&(!A||2<=E)&&this.startDrawing();mxEvent.consume(z)}}),I=new mxCell;I.edge=!0;var B=function(){var z=b.getCurrentCellStyle(I);z=mxUtils.getValue(b.currentVertexStyle,