Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
I.offsetTop);this.showShapePicker(Math.max(this.diagramContainer.scrollLeft+Math.max(24,P.x)),this.diagramContainer.scrollTop+P.y,null,null,null,null,mxUtils.bind(this,function(M){return g.getCenterInsertPoint(g.getBoundingBoxFromGeometry(M,!0))}),"simple"==d,!1)}mxEvent.consume(Q)}));B.style.backgroundSize="24px";"simple"==d?B.style.flexShrink="0":B.style.marginBottom="4px";var F=!1,U=mxUtils.bind(this,function(Q){if(Q||document.body.contains(n)){Q=function(y,C,K,l,z,J){null!=C&&y.setAttribute("title",
C);y.style.cursor="pointer";y.style.margin="simple"==d?"0px":"8px 0px 8px 2px";y.style.display="simple"==d?"inline-block":"block";n.appendChild(y);"simple"==d?y.style.opacity="0.7":null!=l&&(C=z,C=null!=C?C:30,J=null!=J?J:26,y.style.position="relative",y.style.overflow="visible",K=document.createElement("div"),K.style.position="absolute",K.style.fontSize="8px",K.style.left=C+"px",K.style.top=J+"px",mxUtils.write(K,l),y.appendChild(K));return y};n.innerText="";if(!F){var P=window.innerWidth||document.documentElement.clientWidth||