Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
I.vertex=!0;N.addCell(I);N.dblClick=function(J,F){if(null!=F&&F!=I)N.setSelectionCell(F);else{F=mxUtils.convertPoint(N.container,mxEvent.getClientX(J),mxEvent.getClientY(J));mxEvent.consume(J);J=N.view.scale;var O=N.view.translate;N.setSelectionCell(l((F.x-3*J)/J-O.x,(F.y-3*J)/J-O.y))}};k=new mxKeyHandler(N);k.bindKey(46,x);k.bindKey(8,x);N.getRubberband().isForceRubberbandEvent=function(J){return 0==J.evt.button&&(null==J.getCell()||J.getCell()==I)};N.panningHandler.isForcePanningEvent=function(J){return 2==
J.evt.button};var d=N.isCellSelectable;N.isCellSelectable=function(J){return J==I?!1:d.apply(this,arguments)};N.getLinkForCell=function(){return null};var g=N.view.getState(I);z=N.getAllConnectionConstraints(g);for(var n=0;null!=z&&n<z.length;n++){var t=N.getConnectionPoint(g,z[n]);l(t.x-3,t.y-3,z[n])}N.fit(8);N.center();n=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){N.zoomIn()},20);n.setAttribute("disabled","disabled");t=b.createToolbarButton(Editor.zoomOutImage,