Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
F.freehand){var ma=F.freehand.createStyle;F.freehand.createStyle=function(ia){return ma.apply(this,arguments)+"sketch=0;"}}B.editor.addListener("statusChanged",mxUtils.bind(this,function(){B.setStatusText(B.editor.getStatus())}));B.setStatusText(B.editor.getStatus());var Z=B.menus.get("viewZoom");if(null!=Z){var S=function(ia){if(mxEvent.isAltDown(ia))B.hideCurrentMenu(),B.actions.get("customZoom").funct(),mxEvent.consume(ia);else if("geMenuItem"==mxEvent.getSource(ia).className||mxEvent.isShiftDown(ia))B.hideCurrentMenu(),