Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
H.pageFormat.width*oa;I.pageHeight=H.pageFormat.height*ca;I.backgroundClr=H.background;I.mathEnabled=H.mathEnabled;I.shadowVisible=H.shadowVisible}catch(qa){}return I}function h(H,I,L,N){return c(H,I/M.CONVERSION_FACTOR,L,N)}function c(H,I,L,N){L=z(L,M.XMLNS,"Cell");L.setAttribute("N",H);L.setAttribute("V",I);N&&L.setAttribute("F",N);return L}function a(H,I,L,N,Q){var ha=z(Q,M.XMLNS,"Row");ha.setAttribute("T",H);ha.setAttribute("IX",I);ha.appendChild(h("X",L,Q));ha.appendChild(h("Y",N,Q));return ha}