Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
case mxConstants.STYLE_FILLCOLOR:return ca(D,t);case mxConstants.STYLE_DASHED:return qa(D);case mxConstants.STYLE_STROKEWIDTH:return sa(D);case mxConstants.STYLE_IMAGE:return Fa(D,t);case mxConstants.STYLE_POINTER_EVENTS:return D.Magnetize?"container=1;pointerEvents=0;collapsible=0;recursiveResize=0;":""}return""}function f(u){u=c(u);if(null!=u)for(var F=0;F<u.length;){var D=u[F];if("s"==D.n&&D.v)return"fontSize="+z(.75*D.v)+";";F++}return"fontSize=13;"}function k(u){var F=c(u);if(null!=F)for(var D=
0;D<F.length;D++)if("f"==F[D].n&&F[D].v){var t=F[D].v;break}!t&&u.Font&&(t=u.Font);y(t);return lb}function p(u){return"ext"==u.tp?u.url:"ml"==u.tp?"mailto:"+u.eml:"pg"==u.tp?"data:page/id,"+(LucidImporter.pageIdsMap[u.id]||0):"c"==u.tp?"data:confluence/id,"+u.ccid:null}function n(u){u=c(u);if(null!=u)for(var F=0;F<u.length;){var D=u[F];if("c"==D.n&&null!=D.v)return u=T(D.v).substring(0,7),"#000000"==u&&(u="default"),mxConstants.STYLE_FONTCOLOR+"="+u+";";F++}return""}function x(u){return A(c(u))}function A(u){if(null!=