Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(F){if(g.isEnabled()&&1==g.getSelectionCount()){var O=g.getSelectionCell(),S=mxEvent.isControlDown(F)?null:g.getIncomingTreeEdges(O);F=[];if(null!=S&&0<S.length&&(S=g.getOutgoingTreeEdges(g.model.getTerminal(S[0],!0)),null!=S))for(var K=0;K<S.length;K++)F.push(g.model.getTerminal(S[K],!1));0==F.length&&(F=g.model.getChildren(g.model.getParent(O)));g.setSelectionCells(F)}},null,null,"Alt+Shift+S");var u=g.removeCells;g.removeCells=function(F,O){O=null!=O?O:!0;null==F&&(F=this.getDeletableCells(this.getSelectionCells()));
O&&(F=this.getDeletableCells(this.addAllEdges(F)));for(var S=[],K=0;K<F.length;K++){var R=F[K];n.isEdge(R)&&l(R)&&(S.push(R),R=n.getTerminal(R,!1));if(c(R)){var m=[];g.traverse(R,!0,function(A,M){var Q=null!=M&&g.isTreeEdge(M);Q&&m.push(M);(null==M||Q)&&m.push(A);return null==M||Q});0<m.length&&(S=S.concat(m),R=g.getIncomingTreeEdges(F[K]),F=F.concat(R))}else null!=R&&S.push(F[K])}F=S;return u.apply(this,arguments)};d.hoverIcons.getStateAt=function(F,O,S){return c(F.cell)?null:this.graph.view.getState(this.graph.getCellAt(O,