Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m&&(H=this.getDeletableCells(this.addAllEdges(H)));for(var v=[],A=0;A<H.length;A++){var I=H[A];k.isEdge(I)&&u(I)&&(v.push(I),I=k.getTerminal(I,!1));if(d(I)){var g=[];e.traverse(I,!0,function(x,F){var M=null!=F&&e.isTreeEdge(F);M&&g.push(F);(null==F||M)&&g.push(x);return null==F||M});0<g.length&&(v=v.concat(g),I=e.getIncomingTreeEdges(H[A]),H=H.concat(I))}else null!=I&&v.push(H[A])}H=v;return p.apply(this,arguments)};c.hoverIcons.getStateAt=function(H,m,v){return d(H.cell)?null:this.graph.view.getState(this.graph.getCellAt(m,
v))};var t=e.duplicateCells;e.duplicateCells=function(H,m){H=null!=H?H:this.getSelectionCells();for(var v=H.slice(0),A=0;A<v.length;A++){var I=e.view.getState(v[A]);if(null!=I&&d(I.cell)){var g=e.getIncomingTreeEdges(I.cell);for(I=0;I<g.length;I++)mxUtils.remove(g[I],H)}}this.model.beginUpdate();try{var x=t.call(this,H,m);if(x.length==H.length)for(A=0;A<H.length;A++)if(d(H[A])){var F=e.getIncomingTreeEdges(x[A]);g=e.getIncomingTreeEdges(H[A]);if(0==F.length&&0<g.length){var M=this.cloneCell(g[0]);