Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.toggleHiddenTag=function(l){var A=mxUtils.indexOf(this.hiddenTags,l);0>A?this.hiddenTags.push(l):0<=A&&this.hiddenTags.splice(A,1);this.fireEvent(new mxEventObject("hiddenTagsChanged"))};Graph.prototype.isAllTagsHidden=function(l){if(null==l||0==l.length||0==this.hiddenTags.length)return!1;l=l.split(" ");if(l.length>this.hiddenTags.length)return!1;for(var A=0;A<l.length;A++)if(0>mxUtils.indexOf(this.hiddenTags,l[A]))return!1;return!0};Graph.prototype.getCellsForTags=function(l,A,O,
X){var U=[];if(null!=l){A=null!=A?A:this.model.getDescendants(this.model.getRoot());for(var aa=0,ba={},ia=0;ia<l.length;ia++)0<l[ia].length&&(ba[l[ia]]=!0,aa++);for(ia=0;ia<A.length;ia++)if(O&&this.model.getParent(A[ia])==this.model.root||this.model.isVertex(A[ia])||this.model.isEdge(A[ia])){var qa=this.getTagsForCell(A[ia]),ra=!1;if(0<qa.length&&(qa=qa.split(" "),qa.length>=l.length)){for(var pa=ra=0;pa<qa.length&&ra<aa;pa++)null!=ba[qa[pa]]&&ra++;ra=ra==aa}ra&&(1!=X||this.isCellVisible(A[ia]))&&
U.push(A[ia])}}return U};Graph.prototype.getAllTags=function(){return this.getTagsForCells(this.model.getDescendants(this.model.getRoot()))};Graph.prototype.getCommonTagsForCells=function(l){for(var A=null,O=[],X=0;X<l.length;X++){var U=this.getTagsForCell(l[X]);O=[];if(0<U.length){U=U.split(" ");for(var aa={},ba=0;ba<U.length;ba++)if(null==A||null!=A[U[ba]])aa[U[ba]]=!0,O.push(U[ba]);A=aa}else return[]}return O};Graph.prototype.getTagsForCells=function(l){for(var A=[],O={},X=0;X<l.length;X++){var U=