Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
0>Z&&(Z=P.strokeWidth/2);g.setStrokeAlpha(g.state.fillAlpha);g.setStrokeColor(P.fill||"");g.setStrokeWidth(Z);g.setDashed(!1);this._drawToContext(H,O,P);g.setDashed(X);g.setStrokeWidth(R);g.setStrokeColor(V);g.setStrokeAlpha(W)};y._drawToContext=function(H,O,P){H.begin();for(var V=0;V<O.ops.length;V++){var R=O.ops[V],W=R.data;switch(R.op){case "move":H.moveTo(W[0],W[1]);break;case "bcurveTo":H.curveTo(W[0],W[1],W[2],W[3],W[4],W[5]);break;case "lineTo":H.lineTo(W[0],W[1])}}H.end();"fillPath"===O.type&&
P.filled?H.fill():H.stroke()};return y};(function(){function g(V,R,W){this.canvas=V;this.rc=R;this.shape=W;this.canvas.setLineJoin("round");this.canvas.setLineCap("round");this.originalBegin=this.canvas.begin;this.canvas.begin=mxUtils.bind(this,g.prototype.begin);this.originalEnd=this.canvas.end;this.canvas.end=mxUtils.bind(this,g.prototype.end);this.originalRect=this.canvas.rect;this.canvas.rect=mxUtils.bind(this,g.prototype.rect);this.originalRoundrect=this.canvas.roundrect;this.canvas.roundrect=