Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null==U.getTerminal(g[y],!0)){U.setTerminal(g[y],A,!0);var H=e.getCellGeometry(g[y]);H.points=null;null!=H.getTerminalPoint(!0)&&H.setTerminalPoint(null,!0)}}finally{U.endUpdate()}return g}}var I={67:c.actions.get("selectChildren"),88:c.actions.get("selectDescendants"),80:c.actions.get("selectParent"),83:c.actions.get("selectSiblings")},B=c.onKeyDown;c.onKeyDown=function(A){try{var N=e.getSelectionCell();if(e.isEnabled()&&!e.isEditing()&&null!=N){var Q=mxEvent.isAltDown(A)&&mxEvent.isShiftDown(A)?
I[A.keyCode]:null;null!=Q?(Q.funct(A),mxEvent.consume(A)):d(N)&&(Q=null,0<e.getIncomingTreeEdges(N).length&&(9==A.which?Q=mxEvent.isShiftDown(A)?M(N):G(N):13==A.which&&(Q=K(N,!mxEvent.isShiftDown(A)))),null!=Q&&0<Q.length?(1==Q.length&&e.model.isEdge(Q[0])?e.setSelectionCell(e.model.getTerminal(Q[0],!1)):e.setSelectionCell(Q[Q.length-1]),null!=c.hoverIcons&&c.hoverIcons.update(e.view.getState(N)),e.startEditingAtCell(N),mxEvent.consume(A)):37==A.keyCode?(J(N,mxConstants.DIRECTION_WEST),mxEvent.consume(A)):
38==A.keyCode?(J(N,mxConstants.DIRECTION_NORTH),mxEvent.consume(A)):39==A.keyCode?(J(N,mxConstants.DIRECTION_EAST),mxEvent.consume(A)):40==A.keyCode&&(J(N,mxConstants.DIRECTION_SOUTH),mxEvent.consume(A)))}}catch(L){c.handleError(L)}mxEvent.isConsumed(A)||B.apply(this,arguments)};var T=e.connectVertex;e.connectVertex=function(A,N,Q,L,U,g,y){var H=e.getIncomingTreeEdges(A);if(d(A)){var O=F(A),P=O==mxConstants.DIRECTION_EAST||O==mxConstants.DIRECTION_WEST,V=N==mxConstants.DIRECTION_EAST||N==mxConstants.DIRECTION_WEST;