Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
J.vertex=!0;S.addCell(J);S.dblClick=function(E,A){if(null!=A&&A!=J)S.setSelectionCell(A);else{A=mxUtils.convertPoint(S.container,mxEvent.getClientX(E),mxEvent.getClientY(E));mxEvent.consume(E);E=S.view.scale;var N=S.view.translate;S.setSelectionCell(v((A.x-3*E)/E-N.x,(A.y-3*E)/E-N.y))}};u=new mxKeyHandler(S);u.bindKey(46,D);u.bindKey(8,D);S.getRubberband().isForceRubberbandEvent=function(E){return 0==E.evt.button&&(null==E.getCell()||E.getCell()==J)};S.panningHandler.isForcePanningEvent=function(E){return 2==
E.evt.button};var c=S.isCellSelectable;S.isCellSelectable=function(E){return E==J?!1:c.apply(this,arguments)};S.getLinkForCell=function(){return null};var e=S.view.getState(J);G=S.getAllConnectionConstraints(e);for(var k=0;null!=G&&k<G.length;k++){var q=S.getConnectionPoint(e,G[k]);v(q.x-3,q.y-3,G[k])}S.fit(8);S.center();k=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){S.zoomIn()},20);k.setAttribute("disabled","disabled");q=b.createToolbarButton(Editor.zoomOutImage,