Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N.push(U[Y]);B=aa}else return[]}return N};Graph.prototype.getTagsForCells=function(l){for(var B=[],N={},Z=0;Z<l.length;Z++){var U=this.getTagsForCell(l[Z]);if(0<U.length){U=U.split(" ");for(var aa=0;aa<U.length;aa++)null==N[U[aa]]&&(N[U[aa]]=!0,B.push(U[aa]))}}return B};Graph.prototype.getTagsForCell=function(l){return this.getAttributeForCell(l,"tags","")};Graph.prototype.addTagsForCells=function(l,B){if(0<l.length&&0<B.length){this.model.beginUpdate();try{for(var N=0;N<l.length;N++){for(var Z=this.getTagsForCell(l[N]),