Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
{fill:"#ffcc99",stroke:"#36393d"},{fill:"#cce5ff",stroke:"#36393d"},{fill:"#ffff88",stroke:"#36393d"},{fill:"#cdeb8b",stroke:"#36393d"},{fill:"#ffcccc",stroke:"#36393d"}]];StyleFormatPanel.prototype.customColorSchemes=null;StyleFormatPanel.prototype.findCommonProperties=function(g,x,F){if(null!=x){var M=function(S){if(null!=S)if(F)for(var W=0;W<S.length;W++)x[S[W].name]=S[W];else for(var T in x){var X=!1;for(W=0;W<S.length;W++)if(S[W].name==T&&S[W].type==x[T].type){X=!0;break}X||delete x[T]}},Q=this.editorUi.editor.graph.view.getState(g);
null!=Q&&null!=Q.shape&&(Q.shape.commonCustomPropAdded||(Q.shape.commonCustomPropAdded=!0,Q.shape.customProperties=Q.shape.customProperties||[],Q.cell.vertex?Array.prototype.push.apply(Q.shape.customProperties,Editor.commonVertexProperties):Array.prototype.push.apply(Q.shape.customProperties,Editor.commonEdgeProperties)),M(Q.shape.customProperties));g=g.getAttribute("customProperties");if(null!=g)try{M(JSON.parse(g))}catch(S){}}};var J=StyleFormatPanel.prototype.init;StyleFormatPanel.prototype.init=