Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0;I<H.length;I++){var g=e.view.getState(e.model.getTerminal(H[I],!1));null!=g&&(!m&&Math.min(g.x+g.width,v.x+v.width)>=Math.max(g.x,v.x)||m&&Math.min(g.y+g.height,v.y+v.height)>=Math.max(g.y,v.y))&&A.push(g)}A.sort(function(x,F){return m?x.x+x.width-F.x-F.width:x.y+x.height-F.y-F.height})}return A}function J(H,m){var v=D(H),A=m==mxConstants.DIRECTION_EAST||m==mxConstants.DIRECTION_WEST;(v==mxConstants.DIRECTION_EAST||v==mxConstants.DIRECTION_WEST)==A&&v!=m?c.actions.get("selectParent").funct():v==
m?(m=e.getOutgoingTreeEdges(H),null!=m&&0<m.length&&e.setSelectionCell(e.model.getTerminal(m[0],!1))):(v=e.getIncomingTreeEdges(H),null!=v&&0<v.length&&(A=U(e.model.getTerminal(v[0],!0),A,H),H=e.view.getState(H),null!=H&&(H=mxUtils.indexOf(A,H),0<=H&&(H+=m==mxConstants.DIRECTION_NORTH||m==mxConstants.DIRECTION_WEST?-1:1,0<=H&&H<=A.length-1&&e.setSelectionCell(A[H].cell)))))}var c=this,e=c.editor.graph,k=e.getModel(),n=c.menus.createPopupMenu;c.menus.createPopupMenu=function(H,m,v){n.apply(this,arguments);