Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N&&(A=this.getDeletableCells(this.addAllEdges(A)));for(var Q=[],L=0;L<A.length;L++){var U=A[L];k.isEdge(U)&&v(U)&&(Q.push(U),U=k.getTerminal(U,!1));if(d(U)){var g=[];e.traverse(U,!0,function(y,H){var O=null!=H&&e.isTreeEdge(H);O&&g.push(H);(null==H||O)&&g.push(y);return null==H||O});0<g.length&&(Q=Q.concat(g),U=e.getIncomingTreeEdges(A[L]),A=A.concat(U))}else null!=U&&Q.push(A[L])}A=Q;return p.apply(this,arguments)};c.hoverIcons.getStateAt=function(A,N,Q){return d(A.cell)?null:this.graph.view.getState(this.graph.getCellAt(N,
Q))};var t=e.duplicateCells;e.duplicateCells=function(A,N){A=null!=A?A:this.getSelectionCells();for(var Q=A.slice(0),L=0;L<Q.length;L++){var U=e.view.getState(Q[L]);if(null!=U&&d(U.cell)){var g=e.getIncomingTreeEdges(U.cell);for(U=0;U<g.length;U++)mxUtils.remove(g[U],A)}}this.model.beginUpdate();try{var y=t.call(this,A,N);if(y.length==A.length)for(L=0;L<A.length;L++)if(d(A[L])){var H=e.getIncomingTreeEdges(y[L]);g=e.getIncomingTreeEdges(A[L]);if(0==H.length&&0<g.length){var O=this.cloneCell(g[0]);