Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
return O==N||0==H.length?G(A,N):P==V?M(A):K(A,N!=mxConstants.DIRECTION_NORTH&&N!=mxConstants.DIRECTION_WEST)}return T.apply(this,arguments)};e.getSubtree=function(A){var N=[A];!u(A)&&!d(A)||D(A)||e.traverse(A,!0,function(Q,L){var U=null!=L&&e.isTreeEdge(L);U&&0>mxUtils.indexOf(N,L)&&N.push(L);(null==L||U)&&0>mxUtils.indexOf(N,Q)&&N.push(Q);return null==L||U});return N};var l=mxVertexHandler.prototype.init;mxVertexHandler.prototype.init=function(){l.apply(this,arguments);(u(this.state.cell)||d(this.state.cell))&&