Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,E.width,E.height),f.style+";rotatable=0;resizable=0;connectable=0;editable=0;movable=0;");J.vertex=!0;U.addCell(J);U.dblClick=function(N,H){if(null!=H&&H!=J)U.setSelectionCell(H);else{H=mxUtils.convertPoint(U.container,mxEvent.getClientX(N),mxEvent.getClientY(N));mxEvent.consume(N);N=U.view.scale;var m=U.view.translate;U.setSelectionCell(u((H.x-3*N)/N-m.x,(H.y-3*N)/N-m.y))}};q=new mxKeyHandler(U);q.bindKey(46,z);q.bindKey(8,z);U.getRubberband().isForceRubberbandEvent=function(N){return 0==N.evt.button&&