Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
mxConstants.STYLE_STROKECOLOR,mxUtils.getValue(z,mxConstants.STYLE_STROKECOLOR,"#000"));"default"==z&&(z=b.shapeForegroundColor);return z};this.createStyle=function(z){var E=";fillColor=none;";t&&(E=";lineShape=1;");return mxConstants.STYLE_SHAPE+"="+z+E};this.stopDrawing=function(){if(0<u.length){if(t){for(var z=[],E=0;E<D.length;E++)null!=D[E]&&z.push([D[E].x,D[E].y]);z=PerfectFreehand.getStroke(z,p);D=[];for(E=0;E<z.length;E++)D.push({x:z[E][0],y:z[E][1]});D.push(null)}z=D[0].x;var A=D[0].x,N=