Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
m,u,n,t){var C=c.view;n=null!=n&&0<n.length?n[0]:null;var D=c.absolutePoints,ha=D[0];D=D[D.length-1];null!=n&&(n=C.transformControlPoint(c,n));null==ha&&null!=m&&(ha=new mxPoint(m.getCenterX(),m.getCenterY()));null==D&&null!=u&&(D=new mxPoint(u.getCenterX(),u.getCenterY()));var I=Bb.x,ua=Bb.y,na=vb.x,Za=vb.y,qb="horizontal"==mxUtils.getValue(c.style,"elbow","horizontal");if(null!=D&&null!=ha){c=function(Ga,Ja,Ia){Ga-=fb.x;var Ha=Ja-fb.y;Ja=(Za*Ga-na*Ha)/(I*Za-ua*na);Ga=(ua*Ga-I*Ha)/(ua*na-I*Za);qb?
(Ia&&(fb=new mxPoint(fb.x+I*Ja,fb.y+ua*Ja),t.push(fb)),fb=new mxPoint(fb.x+na*Ga,fb.y+Za*Ga)):(Ia&&(fb=new mxPoint(fb.x+na*Ga,fb.y+Za*Ga),t.push(fb)),fb=new mxPoint(fb.x+I*Ja,fb.y+ua*Ja));t.push(fb)};var fb=ha;null==n&&(n=new mxPoint(ha.x+(D.x-ha.x)/2,ha.y+(D.y-ha.y)/2));c(n.x,n.y,!0);c(D.x,D.y,!1)}};mxStyleRegistry.putValue("isometricEdgeStyle",mxEdgeStyle.IsometricConnector);var Cb=Graph.prototype.createEdgeHandler;Graph.prototype.createEdgeHandler=function(c,m){if(m==mxEdgeStyle.IsometricConnector){var u=