Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
E.evt.button};var c=S.isCellSelectable;S.isCellSelectable=function(E){return E==J?!1:c.apply(this,arguments)};S.getLinkForCell=function(){return null};var e=S.view.getState(J);G=S.getAllConnectionConstraints(e);for(var k=0;null!=G&&k<G.length;k++){var q=S.getConnectionPoint(e,G[k]);v(q.x-3,q.y-3,G[k])}S.fit(8);S.center();k=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){S.zoomIn()},20);k.setAttribute("disabled","disabled");q=b.createToolbarButton(Editor.zoomOutImage,