Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
qa.length>=l.length)){for(var pa=ra=0;pa<qa.length&&ra<aa;pa++)null!=Y[qa[pa]]&&ra++;ra=ra==aa}ra&&(1!=Z||this.isCellVisible(B[ka]))&&U.push(B[ka])}}return U};Graph.prototype.getAllTags=function(){return this.getTagsForCells(this.model.getDescendants(this.model.getRoot()))};Graph.prototype.getCommonTagsForCells=function(l){for(var B=null,N=[],Z=0;Z<l.length;Z++){var U=this.getTagsForCell(l[Z]);N=[];if(0<U.length){U=U.split(" ");for(var aa={},Y=0;Y<U.length;Y++)if(null==B||null!=B[U[Y]])aa[U[Y]]=!0,