Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(A){if(e.isEnabled()&&1==e.getSelectionCount()){var N=e.getSelectionCell(),Q=mxEvent.isControlDown(A)?null:e.getIncomingTreeEdges(N);A=[];if(null!=Q&&0<Q.length&&(Q=e.getOutgoingTreeEdges(e.model.getTerminal(Q[0],!0)),null!=Q))for(var L=0;L<Q.length;L++)A.push(e.model.getTerminal(Q[L],!1));0==A.length&&(A=e.model.getChildren(e.model.getParent(N)));e.setSelectionCells(A)}},null,null,"Alt+Shift+S");var p=e.removeCells;e.removeCells=function(A,N){N=null!=N?N:!0;null==A&&(A=this.getDeletableCells(this.getSelectionCells()));
N&&(A=this.getDeletableCells(this.addAllEdges(A)));for(var Q=[],L=0;L<A.length;L++){var U=A[L];k.isEdge(U)&&v(U)&&(Q.push(U),U=k.getTerminal(U,!1));if(d(U)){var g=[];e.traverse(U,!0,function(y,H){var O=null!=H&&e.isTreeEdge(H);O&&g.push(H);(null==H||O)&&g.push(y);return null==H||O});0<g.length&&(Q=Q.concat(g),U=e.getIncomingTreeEdges(A[L]),A=A.concat(U))}else null!=U&&Q.push(A[L])}A=Q;return p.apply(this,arguments)};c.hoverIcons.getStateAt=function(A,N,Q){return d(A.cell)?null:this.graph.view.getState(this.graph.getCellAt(N,