Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(k,p){return k&&k.equals?k.equals(p):k===p}("1",d);break;case "NoLine":this.noLine=function(k,p){return k&&k.equals?k.equals(p):k===p}("1",d);break;case "NoShow":this.noShow=function(k,p){return k&&k.equals?k.equals(p):k===p}("1",d);break;case "NoSnap":this.noSnap=function(k,p){return k&&k.equals?k.equals(p):k===p}("1",d);break;case "NoQuickDrag":this.noQuickDrag=function(k,p){return k&&k.equals?k.equals(p):k===p}("1",d)}}a=this.rows.length;b=!1;for(f=0;f<c.length;f++)d=g.mxgraph.io.vsdx.geometry.RowFactory.getRowObj(c[f],