Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
t.scrollCellToVisible(t.getSelectionCell())}}}else{N=function(A){var I=m[A];null==I&&(I=new mxCell(A,new mxGeometry(0,0,80,30),"whiteSpace=wrap;html=1;"),I.vertex=!0,m[A]=I,B.push(I));return I};var m={};B=[];for(C=0;C<n.length;C++)if(";"!=n[C].charAt(0)){var v=n[C].split("->");2<=v.length&&(P=N(v[0]),H=N(v[v.length-1]),v=new mxCell(2<v.length?v[1]:"",new mxGeometry),v.edge=!0,P.insertEdge(v,!0),H.insertEdge(v,!1),B.push(v))}if(0<B.length){n=document.createElement("div");n.style.visibility="hidden";