Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
Graph.prototype.updateCustomLinkActions=function(l,B){for(var N=0;N<B.length;N++){var Z=B[N],U;for(U in Z)this.updateCustomLinkAction(l,Z[U],"cells"),this.updateCustomLinkAction(l,Z[U],"excludeCells")}};Graph.prototype.updateCustomLinkAction=function(l,B,N){if(null!=B&&null!=B[N]){for(var Z=[],U=0;U<B[N].length;U++)if("*"==B[N][U])Z.push(B[N][U]);else{var aa=l[B[N][U]];null!=aa?""!=aa&&Z.push(aa):Z.push(B[N][U])}B[N]=Z}};Graph.prototype.getCellsForAction=function(l,B){B=this.getCellsById(l.cells).concat(this.getCellsForTags(l.tags,
null,B));if(null!=l.excludeCells){for(var N=[],Z=0;Z<B.length;Z++)0>l.excludeCells.indexOf(B[Z].id)&&N.push(B[Z]);B=N}return B};Graph.prototype.getCellsById=function(l){var B=[];if(null!=l)for(var N=0;N<l.length;N++)if("*"==l[N]){var Z=this.model.getRoot();B=B.concat(this.model.filterDescendants(function(aa){return aa!=Z},Z))}else{var U=this.model.getCell(l[N]);null!=U&&B.push(U)}return B};var ma=Graph.prototype.isCellVisible;Graph.prototype.isCellVisible=function(l){return ma.apply(this,arguments)&&