Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
P[X[Z]]&&Y++;Y=Y==W}Y&&(1!=Q||this.isCellVisible(A[V]))&&U.push(A[V])}}return U};Graph.prototype.getAllTags=function(){return this.getTagsForCells(this.model.getDescendants(this.model.getRoot()))};Graph.prototype.getCommonTagsForCells=function(m){for(var A=null,M=[],Q=0;Q<m.length;Q++){var U=this.getTagsForCell(m[Q]);M=[];if(0<U.length){U=U.split(" ");for(var W={},P=0;P<U.length;P++)if(null==A||null!=A[U[P]])W[U[P]]=!0,M.push(U[P]);A=W}else return[]}return M};Graph.prototype.getTagsForCells=function(m){for(var A=
[],M={},Q=0;Q<m.length;Q++){var U=this.getTagsForCell(m[Q]);if(0<U.length){U=U.split(" ");for(var W=0;W<U.length;W++)null==M[U[W]]&&(M[U[W]]=!0,A.push(U[W]))}}return A};Graph.prototype.getTagsForCell=function(m){return this.getAttributeForCell(m,"tags","")};Graph.prototype.addTagsForCells=function(m,A){if(0<m.length&&0<A.length){this.model.beginUpdate();try{for(var M=0;M<m.length;M++){for(var Q=this.getTagsForCell(m[M]),U=Q.split(" "),W=!1,P=0;P<A.length;P++){var V=mxUtils.trim(A[P]);""!=V&&0>mxUtils.indexOf(U,