Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null==U?Z.geometry.x+(Z.geometry.width-l[1].geometry.width)/2:(U.x+U.width)/ba-aa.x+-A.x+10,l[1].geometry.y-=l[1].geometry.height+A.y+40):(l[1].geometry.x=V==mxConstants.DIRECTION_WEST?l[1].geometry.x-(l[1].geometry.width+A.x+40):l[1].geometry.x+(l[1].geometry.width-A.x+40),l[1].geometry.y=null==U?Z.geometry.y+(Z.geometry.height-l[1].geometry.height)/2:(U.y+U.height)/ba-aa.y+-A.y+10);return f.addCells(l,da)}finally{f.model.endUpdate()}}function R(Z,S,da){Z=f.getOutgoingTreeEdges(Z);da=f.view.getState(da);
var P=[];if(null!=da&&null!=Z){for(var V=0;V<Z.length;V++){var l=f.view.getState(f.model.getTerminal(Z[V],!1));null!=l&&(!S&&Math.min(l.x+l.width,da.x+da.width)>=Math.max(l.x,da.x)||S&&Math.min(l.y+l.height,da.y+da.height)>=Math.max(l.y,da.y))&&P.push(l)}P.sort(function(A,O){return S?A.x+A.width-O.x-O.width:A.y+A.height-O.y-O.height})}return P}function W(Z,S){var da=L(Z),P=S==mxConstants.DIRECTION_EAST||S==mxConstants.DIRECTION_WEST;(da==mxConstants.DIRECTION_EAST||da==mxConstants.DIRECTION_WEST)==