Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!this.isAllTagsHidden(this.getTagsForCell(l))};Graph.prototype.setHiddenTags=function(l){this.hiddenTags=l;this.fireEvent(new mxEventObject("hiddenTagsChanged"))};Graph.prototype.toggleHiddenTag=function(l){var B=mxUtils.indexOf(this.hiddenTags,l);0>B?this.hiddenTags.push(l):0<=B&&this.hiddenTags.splice(B,1);this.fireEvent(new mxEventObject("hiddenTagsChanged"))};Graph.prototype.isAllTagsHidden=function(l){if(null==l||0==l.length||0==this.hiddenTags.length)return!1;l=l.split(" ");if(l.length>this.hiddenTags.length)return!1;
for(var B=0;B<l.length;B++)if(0>mxUtils.indexOf(this.hiddenTags,l[B]))return!1;return!0};Graph.prototype.getCellsForTags=function(l,B,N,Z){var U=[];if(null!=l){B=null!=B?B:this.model.getDescendants(this.model.getRoot());for(var aa=0,Y={},ka=0;ka<l.length;ka++)0<l[ka].length&&(Y[l[ka]]=!0,aa++);for(ka=0;ka<B.length;ka++)if(N&&this.model.getParent(B[ka])==this.model.root||this.model.isVertex(B[ka])||this.model.isEdge(B[ka])){var qa=this.getTagsForCell(B[ka]),ra=!1;if(0<qa.length&&(qa=qa.split(" "),