Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Graph.prototype.updateCustomLinkActions=function(l,B){for(var N=0;N<B.length;N++){var Z=B[N],U;for(U in Z)this.updateCustomLinkAction(l,Z[U],"cells"),this.updateCustomLinkAction(l,Z[U],"excludeCells")}};Graph.prototype.updateCustomLinkAction=function(l,B,N){if(null!=B&&null!=B[N]){for(var Z=[],U=0;U<B[N].length;U++)if("*"==B[N][U])Z.push(B[N][U]);else{var aa=l[B[N][U]];null!=aa?""!=aa&&Z.push(aa):Z.push(B[N][U])}B[N]=Z}};Graph.prototype.getCellsForAction=function(l,B){B=this.getCellsById(l.cells).concat(this.getCellsForTags(l.tags,