Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
t.scrollCellToVisible(t.getSelectionCell())}}}else{E=function(L){var U=N[L];null==U&&(U=new mxCell(L,new mxGeometry(0,0,80,30),"whiteSpace=wrap;html=1;"),U.vertex=!0,N[L]=U,B.push(U));return U};var N={};B=[];for(C=0;C<q.length;C++)if(";"!=q[C].charAt(0)){var Q=q[C].split("->");2<=Q.length&&(z=E(Q[0]),A=E(Q[Q.length-1]),Q=new mxCell(2<Q.length?Q[1]:"",new mxGeometry),Q.edge=!0,z.insertEdge(Q,!0),A.insertEdge(Q,!1),B.push(Q))}if(0<B.length){q=document.createElement("div");q.style.visibility="hidden";