Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"cells",[N])),b.fireEvent(new mxEventObject("freehandInserted","cell",N))}finally{b.model.endUpdate()}n&&b.setSelectionCells([N])}}for(N=0;N<q.length;N++)q[N].parentNode.removeChild(q[N]);d=null;q=[];z=[]}y(!1)};b.addListener(mxEvent.FIRE_MOUSE_EVENT,mxUtils.bind(this,function(P,N){P=N.getProperty("eventName");N=N.getProperty("event");P==mxEvent.MOUSE_MOVE&&e&&(null!=N.sourceState&&N.sourceState.setCursor("crosshair"),N.consume())}));b.addMouseListener({mouseDown:mxUtils.bind(this,function(P,N){if(b.isEnabled()&&
!b.isCellLocked(b.getDefaultParent())&&(P=N.getEvent(),e&&!mxEvent.isPopupTrigger(P)&&!mxEvent.isMultiTouchEvent(P))){var H=parseFloat(b.currentVertexStyle[mxConstants.STYLE_STROKEWIDTH]||1);H=Math.max(1,H*b.view.scale);var m=B();d=document.createElementNS("http://www.w3.org/2000/svg","path");d.setAttribute("fill",t?m:"none");d.setAttribute("stroke",m);d.setAttribute("stroke-width",H);"1"==b.currentVertexStyle[mxConstants.STYLE_DASHED]&&(m=b.currentVertexStyle[mxConstants.STYLE_DASH_PATTERN]||"3 3",
m=m.split(" ").map(function(v){return parseFloat(v)*H}).join(" "),d.setAttribute("stroke-dasharray",m));c=[];P=V(P);R(P);u="M"+P.x+" "+P.y;z.push(P);D=[];d.setAttribute("d",t?PerfectFreehand.getSvgPathFromStroke([[P.x,P.y]],p):u);f.appendChild(d);N.consume()}}),mouseMove:mxUtils.bind(this,function(P,N){if(d&&b.isEnabled()&&!b.isCellLocked(b.getDefaultParent())){P=N.getEvent();P=V(P);R(P);var H=O(0);if(H)if(z.push(H),t){var m=[];for(H=0;H<z.length;H++)m.push([z[H].x,z[H].y]);D=[];for(var v=2;v<c.length;v+=