Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"keys",Ea,"values",Ta,"cells",ba.getSelectionCells()))}finally{ba.getModel().endUpdate()}}function Q(qa,ta,ua){var Da=mxUtils.getOffset(g,!0),Ea=mxUtils.getOffset(qa,!0);ta.style.position="absolute";ta.style.left=Ea.x-Da.x+"px";ta.style.top=Ea.y-Da.y+"px";ta.style.width=qa.offsetWidth+"px";ta.style.height=qa.offsetHeight-(ua?4:0)+"px";ta.style.zIndex=5}function S(qa,ta,ua){var Da=document.createElement("div");Da.style.width="32px";Da.style.height="4px";Da.style.margin="2px";Da.style.border="1px solid black";
Da.style.background=ta&&"none"!=ta?ta:"url('"+Dialog.prototype.noColorImage+"')";btn=mxUtils.button("",mxUtils.bind(Y,function(Ea){this.editorUi.pickColor(ta,function(Ta){Da.style.background="none"==Ta?"url('"+Dialog.prototype.noColorImage+"')":Ta;M(qa,Ta,ua)});mxEvent.consume(Ea)}));btn.style.height="12px";btn.style.width="40px";btn.className="geColorBtn";btn.appendChild(Da);return btn}function W(qa,ta,ua,Da,Ea,Ta,Ka){null!=ta&&(ta=ta.split(","),fa.push({name:qa,values:ta,type:ua,defVal:Da,countProperty:Ea,