Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
this.isEnabled()&&(S=da.getProperty("event"),da=S.getState(),!mxEvent.isAltDown(S.getEvent())&&null!=da&&this.model.isEdge(da.cell)&&(E=new mxPoint(S.getGraphX(),S.getGraphY()),K=this.isCellSelected(da.cell),T=da,M=S,null!=da.text&&null!=da.text.boundingBox&&mxUtils.contains(da.text.boundingBox,S.getGraphX(),S.getGraphY())?F=mxEvent.LABEL_HANDLE:(da=this.selectionCellsHandler.getHandler(da.cell),null!=da&&null!=da.bends&&0<da.bends.length&&(F=da.getHandleForEvent(S)))))}));this.addMouseListener({mouseDown:function(S,
da){},mouseMove:mxUtils.bind(this,function(S,da){S=this.selectionCellsHandler.handlers.map;for(var P in S)if(null!=S[P].index)return;if(this.isEnabled()&&!this.panningHandler.isActive()&&!mxEvent.isAltDown(da.getEvent())){var V=this.tolerance;if(null!=E&&null!=T&&null!=M){if(P=T,null!=F||Math.abs(E.x-da.getGraphX())>V||Math.abs(E.y-da.getGraphY())>V){var l=this.selectionCellsHandler.getHandler(P.cell);if(null!=l&&null!=l.bends&&0<l.bends.length){l.redrawHandles();S=null!=F?F:l.getHandleForEvent(M);