Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
x.scrollCellToVisible(x.getSelectionCell())}}}else{P=function(C){var K=p[C];null==K&&(K=new mxCell(C,new mxGeometry(0,0,80,30),"whiteSpace=wrap;html=1;"),K.vertex=!0,p[C]=K,F.push(K));return K};var p={};F=[];for(G=0;G<q.length;G++)if(";"!=q[G].charAt(0)){var y=q[G].split("->");2<=y.length&&(Q=P(y[0]),M=P(y[y.length-1]),y=new mxCell(2<y.length?y[1]:"",new mxGeometry),y.edge=!0,Q.insertEdge(y,!0),M.insertEdge(y,!1),F.push(y))}if(0<F.length){q=document.createElement("div");q.style.visibility="hidden";