Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[];this.traverse(y,!0,mxUtils.bind(this,function(M,T){var F=null!=T&&this.isTreeEdge(T);F&&q.push(T);M==y||null!=T&&!F||q.push(M);return(null==T||F)&&(M==y||!this.model.isCollapsed(M))}));this.model.setCollapsed(y,p);for(var E=0;E<q.length;E++)this.model.setVisible(q[E],!p)}finally{this.model.endUpdate()}};Graph.prototype.isTreeEdge=function(p){return!this.isEdgeIgnored(p)};Graph.prototype.getTreeEdges=function(p,y,q,E,M,T){return this.model.filterCells(this.getEdges(p,y,q,E,M,T),mxUtils.bind(this,