Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
R);mxUtils.extend(W,mxShape);W.prototype.size=15;W.prototype.paintVertexShape=function(c,m,u,n,t){var C=Math.max(0,Math.min(.5*t,parseFloat(mxUtils.getValue(this.style,"size",this.size))));c.translate(m,u);0==C?(c.rect(0,0,n,t),c.fillAndStroke()):(c.begin(),c.moveTo(0,C),c.arcTo(.5*n,C,0,0,1,.5*n,0),c.arcTo(.5*n,C,0,0,1,n,C),c.lineTo(n,t-C),c.arcTo(.5*n,C,0,0,1,.5*n,t),c.arcTo(.5*n,C,0,0,1,0,t-C),c.close(),c.fillAndStroke(),c.setShadow(!1),c.begin(),c.moveTo(n,C),c.arcTo(.5*n,C,0,0,1,.5*n,2*C),c.arcTo(.5*
n,C,0,0,1,0,C),c.stroke())};mxCellRenderer.registerShape("cylinder2",W);mxUtils.extend(d,mxCylinder);d.prototype.size=15;d.prototype.paintVertexShape=function(c,m,u,n,t){var C=Math.max(0,Math.min(.5*t,parseFloat(mxUtils.getValue(this.style,"size",this.size)))),D=mxUtils.getValue(this.style,"lid",!0);c.translate(m,u);0==C?(c.rect(0,0,n,t),c.fillAndStroke()):(c.begin(),D?(c.moveTo(0,C),c.arcTo(.5*n,C,0,0,1,.5*n,0),c.arcTo(.5*n,C,0,0,1,n,C)):(c.moveTo(0,0),c.arcTo(.5*n,C,0,0,0,.5*n,C),c.arcTo(.5*n,C,