Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m?(m=e.getOutgoingTreeEdges(H),null!=m&&0<m.length&&e.setSelectionCell(e.model.getTerminal(m[0],!1))):(v=e.getIncomingTreeEdges(H),null!=v&&0<v.length&&(A=U(e.model.getTerminal(v[0],!0),A,H),H=e.view.getState(H),null!=H&&(H=mxUtils.indexOf(A,H),0<=H&&(H+=m==mxConstants.DIRECTION_NORTH||m==mxConstants.DIRECTION_WEST?-1:1,0<=H&&H<=A.length-1&&e.setSelectionCell(A[H].cell)))))}var c=this,e=c.editor.graph,k=e.getModel(),n=c.menus.createPopupMenu;c.menus.createPopupMenu=function(H,m,v){n.apply(this,arguments);
if(1==e.getSelectionCount()){m=e.getSelectionCell();var A=e.getOutgoingTreeEdges(m);H.addSeparator();0<A.length&&(d(e.getSelectionCell())&&this.addMenuItems(H,["selectChildren"],null,v),this.addMenuItems(H,["selectDescendants"],null,v));d(e.getSelectionCell())?(H.addSeparator(),0<e.getIncomingTreeEdges(m).length&&this.addMenuItems(H,["selectSiblings","selectParent"],null,v)):0<e.model.getEdgeCount(m)&&this.addMenuItems(H,["selectConnections"],null,v)}};c.actions.addAction("selectChildren",function(H){if(e.isEnabled()&&