Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[];this.traverse(y,!0,mxUtils.bind(this,function(M,T){var F=null!=T&&this.isTreeEdge(T);F&&q.push(T);M==y||null!=T&&!F||q.push(M);return(null==T||F)&&(M==y||!this.model.isCollapsed(M))}));this.model.setCollapsed(y,p);for(var E=0;E<q.length;E++)this.model.setVisible(q[E],!p)}finally{this.model.endUpdate()}};Graph.prototype.isTreeEdge=function(p){return!this.isEdgeIgnored(p)};Graph.prototype.getTreeEdges=function(p,y,q,E,M,T){return this.model.filterCells(this.getEdges(p,y,q,E,M,T),mxUtils.bind(this,
function(F){return this.isTreeEdge(F)}))};Graph.prototype.getIncomingTreeEdges=function(p,y){return this.getTreeEdges(p,y,!0,!1,!1)};Graph.prototype.getOutgoingTreeEdges=function(p,y){return this.getTreeEdges(p,y,!1,!0,!1)};var e=EditorUi.prototype.init;EditorUi.prototype.init=function(){e.apply(this,arguments);this.editor.isChromelessView()&&!this.editor.editable||this.addTrees()};EditorUi.prototype.addTrees=function(){function p(ba){return k.isVertex(ba)&&q(ba)}function y(ba){var S=!1;null!=ba&&