Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N?(N=e.getOutgoingTreeEdges(A),null!=N&&0<N.length&&e.setSelectionCell(e.model.getTerminal(N[0],!1))):(Q=e.getIncomingTreeEdges(A),null!=Q&&0<Q.length&&(L=S(e.model.getTerminal(Q[0],!0),L,A),A=e.view.getState(A),null!=A&&(A=mxUtils.indexOf(L,A),0<=A&&(A+=N==mxConstants.DIRECTION_NORTH||N==mxConstants.DIRECTION_WEST?-1:1,0<=A&&A<=L.length-1&&e.setSelectionCell(L[A].cell)))))}var c=this,e=c.editor.graph,k=e.getModel(),q=c.menus.createPopupMenu;c.menus.createPopupMenu=function(A,N,Q){q.apply(this,arguments);
if(1==e.getSelectionCount()){N=e.getSelectionCell();var L=e.getOutgoingTreeEdges(N);A.addSeparator();0<L.length&&(d(e.getSelectionCell())&&this.addMenuItems(A,["selectChildren"],null,Q),this.addMenuItems(A,["selectDescendants"],null,Q));d(e.getSelectionCell())?(A.addSeparator(),0<e.getIncomingTreeEdges(N).length&&this.addMenuItems(A,["selectSiblings","selectParent"],null,Q)):0<e.model.getEdgeCount(N)&&this.addMenuItems(A,["selectConnections"],null,Q)}};c.actions.addAction("selectChildren",function(A){if(e.isEnabled()&&