Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
f.connectVertex=function(Z,S,da,P,V,l,A){var O=f.getIncomingTreeEdges(Z);if(n(Z)){var X=L(Z),U=X==mxConstants.DIRECTION_EAST||X==mxConstants.DIRECTION_WEST,aa=S==mxConstants.DIRECTION_EAST||S==mxConstants.DIRECTION_WEST;return X==S||0==O.length?M(Z,S):U==aa?G(Z):T(Z,S!=mxConstants.DIRECTION_NORTH&&S!=mxConstants.DIRECTION_WEST)}return ka.apply(this,arguments)};f.getSubtree=function(Z){var S=[Z];!y(Z)&&!n(Z)||E(Z)||f.traverse(Z,!0,function(da,P){var V=null!=P&&f.isTreeEdge(P);V&&0>mxUtils.indexOf(S,
P)&&S.push(P);(null==P||V)&&0>mxUtils.indexOf(S,da)&&S.push(da);return null==P||V});return S};var ea=mxVertexHandler.prototype.init;mxVertexHandler.prototype.init=function(){ea.apply(this,arguments);(y(this.state.cell)||n(this.state.cell))&&!E(this.state.cell)&&0<this.graph.getOutgoingTreeEdges(this.state.cell).length&&(this.moveHandle=mxUtils.createImage(Editor.moveImage),this.moveHandle.setAttribute("title","Move Subtree"),this.moveHandle.style.position="absolute",this.moveHandle.style.cursor="pointer",