Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
W)&&(O=0<O.length?O+" "+W:W,V=!0)}V&&this.setAttributeForCell(g[H],"tags",O)}}finally{this.model.endUpdate()}}};Graph.prototype.removeTagsForCells=function(g,y){if(0<g.length&&0<y.length){this.model.beginUpdate();try{for(var H=0;H<g.length;H++){var O=this.getTagsForCell(g[H]);if(0<O.length){for(var P=O.split(" "),V=!1,R=0;R<y.length;R++){var W=mxUtils.indexOf(P,y[R]);0<=W&&(P.splice(W,1),V=!0)}V&&this.setAttributeForCell(g[H],"tags",P.join(" "))}}}finally{this.model.endUpdate()}}};Graph.prototype.toggleCells=