Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
C,u),c.lineTo(m+n-C,u),c.quadTo(m+n,u,m+n,u+C),c.lineTo(m+n,u+t-C),c.quadTo(m+n,u+t,m+n-C,u+t),c.lineTo(m+C,u+t),c.quadTo(m,u+t,m,u+t-C),c.lineTo(m,u+C),c.quadTo(m,u,m+C,u)):(c.moveTo(m,u),c.lineTo(m+n,u),c.lineTo(m+n,u+t),c.lineTo(m,u+t),c.lineTo(m,u)),c.close(),c.end(),c.fillAndStroke()}};mxUtils.extend(ca,mxRectangleShape);ca.prototype.size=.1;ca.prototype.fixedSize=!1;ca.prototype.isHtmlAllowed=function(){return!1};ca.prototype.getLabelBounds=function(c){if(mxUtils.getValue(this.state.style,mxConstants.STYLE_HORIZONTAL,