Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
J.vertex=!0;S.addCell(J);S.dblClick=function(E,A){if(null!=A&&A!=J)S.setSelectionCell(A);else{A=mxUtils.convertPoint(S.container,mxEvent.getClientX(E),mxEvent.getClientY(E));mxEvent.consume(E);E=S.view.scale;var N=S.view.translate;S.setSelectionCell(v((A.x-3*E)/E-N.x,(A.y-3*E)/E-N.y))}};u=new mxKeyHandler(S);u.bindKey(46,D);u.bindKey(8,D);S.getRubberband().isForceRubberbandEvent=function(E){return 0==E.evt.button&&(null==E.getCell()||E.getCell()==J)};S.panningHandler.isForcePanningEvent=function(E){return 2==