Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(){if(!this.isProcessed){try{for(var c=this.theme.firstChild;null!=c;){if(null!=c&&1==c.nodeType&&function(f,k){return f&&f.equals?f.equals(k):f===k}(c.nodeName,"a:themeElements"))for(var a=c.firstChild;null!=a;){if(null!=a&&1==a.nodeType){var b=a,d=b.nodeName;(function(f,k){return f&&f.equals?f.equals(k):f===k})(d,"a:clrScheme")?(function(f,k){return f&&f.equals?f.equals(k):f===k}(this.name,b.getAttribute("name"))||(this.__isPure=!1),this.processColors(b)):function(f,k){return f&&f.equals?
f.equals(k):f===k}(d,"a:fontScheme")?(function(f,k){return f&&f.equals?f.equals(k):f===k}(this.name,b.getAttribute("name"))||(this.__isPure=!1),this.processFonts(b)):function(f,k){return f&&f.equals?f.equals(k):f===k}(d,"a:fmtScheme")?(function(f,k){return f&&f.equals?f.equals(k):f===k}(this.name,b.getAttribute("name"))||(this.__isPure=!1),this.processFormats(b)):function(f,k){return f&&f.equals?f.equals(k):f===k}(d,"a:extLst")&&this.processExtras(b)}a=a.nextSibling}c=c.nextSibling}}catch(f){}this.isProcessed=
!0}};h.prototype.processExtras=function(c){c=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(c);for(var a=0;a<c.length;a++){var b=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectFirstChildElement(c[a]);switch(b.nodeName){case "vt:fmtConnectorScheme":var d=this.name;var f=b.getAttribute("name");d=d&&d.equals?d.equals(f):d===f;d||(this.__isPure=!1);b=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(b);for(d=0;d<b.length;d++)switch(f=b[d],f.nodeName){case "a:fillStyleLst":f=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildElements(f);