Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
function(ba){var S=[ba];!y(ba)&&!p(ba)||E(ba)||f.traverse(ba,!0,function(da,P){var V=null!=P&&f.isTreeEdge(P);V&&0>mxUtils.indexOf(S,P)&&S.push(P);(null==P||V)&&0>mxUtils.indexOf(S,da)&&S.push(da);return null==P||V});return S};var fa=mxVertexHandler.prototype.init;mxVertexHandler.prototype.init=function(){fa.apply(this,arguments);(y(this.state.cell)||p(this.state.cell))&&!E(this.state.cell)&&0<this.graph.getOutgoingTreeEdges(this.state.cell).length&&(this.moveHandle=mxUtils.createImage(Editor.moveImage),