Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
E.createVertexHandler=function(){var Q=V.apply(this,arguments);Q.livePreview=!1;return Q};if(null!=l)try{if("inset"==l.substring(0,5)){var R=c.geometry,O=L.width,P=L.height,N=(300-O)/2,H=(300-P)/2,m=l.match(/\(([^)]+)\)/)[1].split(/[ ,]+/),v=parseFloat(m[0]),A=parseFloat(m[1]),I=parseFloat(m[2]),g=parseFloat(m[3]);isFinite(v)&&isFinite(A)&&isFinite(I)&&isFinite(g)?(R.x=g/100*O+N,R.y=v/100*P+H,R.width=(100-A)/100*O+N-R.x,R.height=(100-I)/100*P+H-R.y,"round"==m[4]?"50%"==m[5]?p.setAttribute("checked",