Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
da;return z.apply(this,arguments)};d.hoverIcons.getStateAt=function(Z,S,da){return n(Z.cell)?null:this.graph.view.getState(this.graph.getCellAt(S,da))};var B=f.duplicateCells;f.duplicateCells=function(Z,S){Z=null!=Z?Z:this.getSelectionCells();for(var da=Z.slice(0),P=0;P<da.length;P++){var V=f.view.getState(da[P]);if(null!=V&&n(V.cell)){var l=f.getIncomingTreeEdges(V.cell);for(V=0;V<l.length;V++)mxUtils.remove(l[V],Z)}}this.model.beginUpdate();try{var A=B.call(this,Z,S);if(A.length==Z.length)for(P=