Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
{67:d.actions.get("selectChildren"),88:d.actions.get("selectDescendants"),80:d.actions.get("selectParent"),83:d.actions.get("selectSiblings")},G=d.onKeyDown;d.onKeyDown=function(ba){try{var S=f.getSelectionCell();if(f.isEnabled()&&!f.isEditing()&&null!=S){var da=mxEvent.isAltDown(ba)&&mxEvent.isShiftDown(ba)?O[ba.keyCode]:null;null!=da?(da.funct(ba),mxEvent.consume(ba)):p(S)&&(da=null,0<f.getIncomingTreeEdges(S).length&&(9==ba.which?da=mxEvent.isShiftDown(ba)?F(S):K(S):13==ba.which&&(da=T(S,!mxEvent.isShiftDown(ba)))),
null!=da&&0<da.length?(1==da.length&&f.model.isEdge(da[0])?f.setSelectionCell(f.model.getTerminal(da[0],!1)):f.setSelectionCell(da[da.length-1]),null!=d.hoverIcons&&d.hoverIcons.update(f.view.getState(S)),f.startEditingAtCell(S),mxEvent.consume(ba)):37==ba.keyCode?(W(S,mxConstants.DIRECTION_WEST),mxEvent.consume(ba)):38==ba.keyCode?(W(S,mxConstants.DIRECTION_NORTH),mxEvent.consume(ba)):39==ba.keyCode?(W(S,mxConstants.DIRECTION_EAST),mxEvent.consume(ba)):40==ba.keyCode&&(W(S,mxConstants.DIRECTION_SOUTH),
mxEvent.consume(ba)))}}catch(P){d.handleError(P)}mxEvent.isConsumed(ba)||G.apply(this,arguments)};var ja=f.connectVertex;f.connectVertex=function(ba,S,da,P,V,l,B){var N=f.getIncomingTreeEdges(ba);if(p(ba)){var Z=M(ba),U=Z==mxConstants.DIRECTION_EAST||Z==mxConstants.DIRECTION_WEST,aa=S==mxConstants.DIRECTION_EAST||S==mxConstants.DIRECTION_WEST;return Z==S||0==N.length?K(ba,S):U==aa?F(ba):T(ba,S!=mxConstants.DIRECTION_NORTH&&S!=mxConstants.DIRECTION_WEST)}return ja.apply(this,arguments)};f.getSubtree=