Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
[];this.traverse(u,!0,mxUtils.bind(this,function(F,K){var M=null!=K&&this.isTreeEdge(K);M&&v.push(K);F==u||null!=K&&!M||v.push(F);return(null==K||M)&&(F==u||!this.model.isCollapsed(F))}));this.model.setCollapsed(u,d);for(var D=0;D<v.length;D++)this.model.setVisible(v[D],!d)}finally{this.model.endUpdate()}};Graph.prototype.isTreeEdge=function(d){return!this.isEdgeIgnored(d)};Graph.prototype.getTreeEdges=function(d,u,v,D,F,K){return this.model.filterCells(this.getEdges(d,u,v,D,F,K),mxUtils.bind(this,
function(M){return this.isTreeEdge(M)}))};Graph.prototype.getIncomingTreeEdges=function(d,u){return this.getTreeEdges(d,u,!0,!1,!1)};Graph.prototype.getOutgoingTreeEdges=function(d,u){return this.getTreeEdges(d,u,!1,!0,!1)};var f=EditorUi.prototype.init;EditorUi.prototype.init=function(){f.apply(this,arguments);this.editor.isChromelessView()&&!this.editor.editable||this.addTrees()};EditorUi.prototype.addTrees=function(){function d(A){return k.isVertex(A)&&v(A)}function u(A){var N=!1;null!=A&&(N="1"==