Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
O&&(F=this.getDeletableCells(this.addAllEdges(F)));for(var S=[],K=0;K<F.length;K++){var R=F[K];n.isEdge(R)&&l(R)&&(S.push(R),R=n.getTerminal(R,!1));if(c(R)){var m=[];g.traverse(R,!0,function(A,M){var Q=null!=M&&g.isTreeEdge(M);Q&&m.push(M);(null==M||Q)&&m.push(A);return null==M||Q});0<m.length&&(S=S.concat(m),R=g.getIncomingTreeEdges(F[K]),F=F.concat(R))}else null!=R&&S.push(F[K])}F=S;return u.apply(this,arguments)};d.hoverIcons.getStateAt=function(F,O,S){return c(F.cell)?null:this.graph.view.getState(this.graph.getCellAt(O,
S))};var v=g.duplicateCells;g.duplicateCells=function(F,O){F=null!=F?F:this.getSelectionCells();for(var S=F.slice(0),K=0;K<S.length;K++){var R=g.view.getState(S[K]);if(null!=R&&c(R.cell)){var m=g.getIncomingTreeEdges(R.cell);for(R=0;R<m.length;R++)mxUtils.remove(m[R],F)}}this.model.beginUpdate();try{var A=v.call(this,F,O);if(A.length==F.length)for(K=0;K<F.length;K++)if(c(F[K])){var M=g.getIncomingTreeEdges(A[K]);m=g.getIncomingTreeEdges(F[K]);if(0==M.length&&0<m.length){var Q=this.cloneCell(m[0]);