Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(function(g){(function(y){(function(z){(function(B){var m=function(){function h(c,a){this.masterShape=this.Id=null;this.childShapes={};this.master=c;this.Id=c.getAttribute(g.mxgraph.io.vsdx.mxVsdxConstants.ID)||"";this.processMasterShapes(a)}h.prototype.processMasterShapes=function(c){for(var a=this.master.firstChild;null!=a;){if(null!=a&&1==a.nodeType&&function(k,p){return k&&k.equals?k.equals(p):k===p}(a.nodeName,"Rel")){var b=c.getRelationship(a.getAttribute("r:id"),g.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+"/masters/_rels/masters.xml.rels"),
d=b.getAttribute("Target");b=b.getAttribute("Type");var f=null;null!=b&&function(k,p){var n=k.length-p.length;k=k.indexOf(p,n);return-1!==k&&k===n}(b,"master")&&(f=c.getXmlDoc(g.mxgraph.io.mxVsdxCodec.vsdxPlaceholder+"/masters/"+d));if(null!=f)for(d=f.firstChild;null!=d;){if(null!=d&&1==d.nodeType&&function(k,p){return k&&k.equals?k.equals(p):k===p}(d.nodeName,"MasterContents")){this.processMasterShape(d,c);break}d=d.nextSibling}}else if(1==a.nodeType&&"PageSheet"==a.nodeName)for(this.pageSheet={},
d=g.mxgraph.io.vsdx.mxVsdxUtils.getDirectChildNamedElements(a,"Cell"),b=0;b<d.length;b++)this.pageSheet[d[b].getAttribute("N")]=d[b];a=a.nextSibling}};h.prototype.processMasterShape=function(c,a,b){b||(this.firstLevelShapes=[]);for(c=c.firstChild;null!=c;){if(null!=c&&1==c.nodeType&&function(n,x){return n&&n.equals?n.equals(x):n===x}(c.nodeName,"Shapes"))for(var d=c.firstChild;null!=d;){if(null!=d&&1==d.nodeType&&function(n,x){return n&&n.equals?n.equals(x):n===x}(d.nodeName,"Shape")){var f=d,k=f.getAttribute("ID"),