Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
p&&(M=this.getDeletableCells(this.addAllEdges(M)));for(var y=[],C=0;C<M.length;C++){var K=M[C];n.isEdge(K)&&m(K)&&(y.push(K),K=n.getTerminal(K,!1));if(c(K)){var l=[];g.traverse(K,!0,function(z,J){var O=null!=J&&g.isTreeEdge(J);O&&l.push(J);(null==J||O)&&l.push(z);return null==J||O});0<l.length&&(y=y.concat(l),K=g.getIncomingTreeEdges(M[C]),M=M.concat(K))}else null!=K&&y.push(M[C])}M=y;return t.apply(this,arguments)};d.hoverIcons.getStateAt=function(M,p,y){return c(M.cell)?null:this.graph.view.getState(this.graph.getCellAt(p,
y))};var x=g.duplicateCells;g.duplicateCells=function(M,p){M=null!=M?M:this.getSelectionCells();for(var y=M.slice(0),C=0;C<y.length;C++){var K=g.view.getState(y[C]);if(null!=K&&c(K.cell)){var l=g.getIncomingTreeEdges(K.cell);for(K=0;K<l.length;K++)mxUtils.remove(l[K],M)}}this.model.beginUpdate();try{var z=x.call(this,M,p);if(z.length==M.length)for(C=0;C<M.length;C++)if(c(M[C])){var J=g.getIncomingTreeEdges(z[C]);l=g.getIncomingTreeEdges(M[C]);if(0==J.length&&0<l.length){var O=this.cloneCell(l[0]);