Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
I.vertex=!0;N.addCell(I);N.dblClick=function(J,F){if(null!=F&&F!=I)N.setSelectionCell(F);else{F=mxUtils.convertPoint(N.container,mxEvent.getClientX(J),mxEvent.getClientY(J));mxEvent.consume(J);J=N.view.scale;var O=N.view.translate;N.setSelectionCell(l((F.x-3*J)/J-O.x,(F.y-3*J)/J-O.y))}};k=new mxKeyHandler(N);k.bindKey(46,x);k.bindKey(8,x);N.getRubberband().isForceRubberbandEvent=function(J){return 0==J.evt.button&&(null==J.getCell()||J.getCell()==I)};N.panningHandler.isForcePanningEvent=function(J){return 2==