Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
G.offsetTop);this.showShapePicker(Math.max(this.diagramContainer.scrollLeft+Math.max(24,N.x)),this.diagramContainer.scrollTop+N.y,null,null,null,null,mxUtils.bind(this,function(H){return e.getCenterInsertPoint(e.getBoundingBoxFromGeometry(H,!0))}),"simple"==c,!1)}mxEvent.consume(P)}));y.style.backgroundSize="24px";"simple"==c?y.style.flexShrink="0":y.style.marginBottom="4px";var B=!1,V=mxUtils.bind(this,function(P){if(P||document.body.contains(k)){P=function(v,A,I,g,x,F){null!=A&&v.setAttribute("title",
A);v.style.cursor="pointer";v.style.margin="simple"==c?"0px":"8px 0px 8px 2px";v.style.display="simple"==c?"inline-block":"block";k.appendChild(v);"simple"==c?v.style.opacity="0.7":null!=g&&(A=x,A=null!=A?A:30,F=null!=F?F:26,v.style.position="relative",v.style.overflow="visible",I=document.createElement("div"),I.style.position="absolute",I.style.fontSize="8px",I.style.left=A+"px",I.style.top=F+"px",mxUtils.write(I,g),v.appendChild(I));return v};k.innerText="";if(!B){var N=window.innerWidth||document.documentElement.clientWidth||