Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
arguments);k()};k();var I=document.createElement("canvas");I.width=N.offsetWidth;I.height=N.offsetHeight;N.style.overflow="hidden";I.style.position="relative";N.appendChild(I);var d=I.getContext("2d");this.ui=b;var g=b.editor.graph;this.graph=g;this.container=N;this.canvas=I;var n=function(B,H,L,G,T){B=Math.round(B);H=Math.round(H);L=Math.round(L);G=Math.round(G);d.beginPath();d.moveTo(B+.5,H+.5);d.lineTo(L+.5,G+.5);d.stroke();T&&(f?(d.save(),d.translate(B,H),d.rotate(-Math.PI/2),d.fillText(T,0,0),
d.restore()):d.fillText(T,B,H))},t=function(){d.clearRect(0,0,I.width,I.height);d.beginPath();d.lineWidth=.7;d.strokeStyle=z.strokeClr;d.setLineDash([]);d.font="9px Arial";d.textAlign="center";var B=g.view.scale,H=g.view.getBackgroundPageBounds(),L=g.view.translate,G=g.pageVisible;L=G?E+(f?H.y-g.container.scrollTop:H.x-g.container.scrollLeft):E+(f?L.y*B-g.container.scrollTop:L.x*B-g.container.scrollLeft);var T=0;G&&(T=g.getPageLayout(),T=f?T.y*g.pageFormat.height:T.x*g.pageFormat.width);var p;switch(D.unit){case mxConstants.POINTS:var q=