Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
for(var Ma=0;Ma<t.length;Ma++){var ra=I.getCellGeometry(t[Ma]);ra.x=Math.round(I.snap(ra.x));ra.y=Math.round(I.snap(ra.y));"auto"==g&&(ra.width=Math.round(I.snap(ra.width)));"auto"==y&&(ra.height=Math.round(I.snap(ra.height)))}};if("["==da.charAt(0)){var oa=Z;I.view.validate();this.executeLayouts(I.createLayouts(JSON.parse(da)),function(){ma();oa()});Z=null}else if("circle"==da){var ha=new mxCircleLayout(I);ha.disableEdgeStyle=!1;ha.resetEdges=!1;var ja=ha.isVertexIgnored;ha.isVertexIgnored=function(Ma){return ja.apply(this,
arguments)||0>mxUtils.indexOf(t,Ma)};this.executeLayout(function(){ha.execute(I.getDefaultParent());ma()},!0,Z);Z=null}else if("horizontaltree"==da||"verticaltree"==da||"auto"==da&&Ua.length==2*t.length-1&&1==Va.length){I.view.validate();var sa=new mxCompactTreeLayout(I,"horizontaltree"==da);sa.levelDistance=R;sa.edgeRouting=!1;sa.resetEdges=!1;this.executeLayout(function(){sa.execute(I.getDefaultParent(),0<Va.length?Va[0]:null)},!0,Z);Z=null}else if("horizontalflow"==da||"verticalflow"==da||"auto"==