Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
H){var m=H.getAttribute("background");if(null==m||""==m||m==mxConstants.NONE)m=Editor.isDarkMode()?"transparent":"#ffffff";n.style.backgroundColor=m;(new mxCodec(H.ownerDocument)).decode(H,p.getModel());p.maxFitScale=1;p.fit(8);p.center()}return H}function O(H){null!=H&&(H=R(Editor.parseDiagramNode(H)));return H}mxEvent.addListener(V,"change",function(H){C=parseInt(V.value);O(G[C]);mxEvent.consume(H)});if("mxfile"==y.nodeName){var P=y.getElementsByTagName("diagram");G=[];for(var N=0;N<P.length;N++)G.push(P[N]);