Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null==R.getTerminal(m[A],!0)){R.setTerminal(m[A],F,!0);var M=g.getCellGeometry(m[A]);M.points=null;null!=M.getTerminalPoint(!0)&&M.setTerminalPoint(null,!0)}}finally{R.endUpdate()}return m}}var L={67:d.actions.get("selectChildren"),88:d.actions.get("selectDescendants"),80:d.actions.get("selectParent"),83:d.actions.get("selectSiblings")},G=d.onKeyDown;d.onKeyDown=function(F){try{var O=g.getSelectionCell();if(g.isEnabled()&&!g.isEditing()&&null!=O){var S=mxEvent.isAltDown(F)&&mxEvent.isShiftDown(F)?
L[F.keyCode]:null;null!=S?(S.funct(F),mxEvent.consume(F)):c(O)&&(S=null,0<g.getIncomingTreeEdges(O).length&&(9==F.which?S=mxEvent.isShiftDown(F)?D(O):z(O):13==F.which&&(S=E(O,!mxEvent.isShiftDown(F)))),null!=S&&0<S.length?(1==S.length&&g.model.isEdge(S[0])?g.setSelectionCell(g.model.getTerminal(S[0],!1)):g.setSelectionCell(S[S.length-1]),null!=d.hoverIcons&&d.hoverIcons.update(g.view.getState(O)),g.startEditingAtCell(O),mxEvent.consume(F)):37==F.keyCode?(I(O,mxConstants.DIRECTION_WEST),mxEvent.consume(F)):
38==F.keyCode?(I(O,mxConstants.DIRECTION_NORTH),mxEvent.consume(F)):39==F.keyCode?(I(O,mxConstants.DIRECTION_EAST),mxEvent.consume(F)):40==F.keyCode&&(I(O,mxConstants.DIRECTION_SOUTH),mxEvent.consume(F)))}}catch(K){d.handleError(K)}mxEvent.isConsumed(F)||G.apply(this,arguments)};var T=g.connectVertex;g.connectVertex=function(F,O,S,K,R,m,A){var M=g.getIncomingTreeEdges(F);if(c(F)){var Q=y(F),U=Q==mxConstants.DIRECTION_EAST||Q==mxConstants.DIRECTION_WEST,W=O==mxConstants.DIRECTION_EAST||O==mxConstants.DIRECTION_WEST;