Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
da)}finally{f.model.endUpdate()}}function F(ba){f.model.beginUpdate();try{var S=M(ba),da=f.getIncomingTreeEdges(ba),P=f.cloneCells([da[0],ba]);f.model.setTerminal(da[0],P[1],!1);f.model.setTerminal(P[0],P[1],!0);f.model.setTerminal(P[0],ba,!1);var V=f.model.getParent(ba),l=V.geometry,B=[];f.view.currentRoot!=V&&(P[1].geometry.x-=l.x,P[1].geometry.y-=l.y);f.traverse(ba,!0,function(U,aa){var Y=null!=aa&&f.isTreeEdge(aa);Y&&B.push(aa);(null==aa||Y)&&B.push(U);return null==aa||Y});var N=ba.geometry.width+