Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
for(var jb=0;jb<B.length;jb++){var ib=N.getCellGeometry(B[jb]);ib.x=Math.round(N.snap(ib.x));ib.y=Math.round(N.snap(ib.y));"auto"==l&&(ib.width=Math.round(N.snap(ib.width)));"auto"==A&&(ib.height=Math.round(N.snap(ib.height)))}};if("["==za.charAt(0)){var Na=ra;N.view.validate();this.executeLayouts(N.createLayouts(JSON.parse(za)),function(){Ra();Na()});ra=null}else if("circle"==za){var Za=new mxCircleLayout(N);Za.disableEdgeStyle=!1;Za.resetEdges=!1;var cb=Za.isVertexIgnored;Za.isVertexIgnored=function(jb){return cb.apply(this,
arguments)||0>mxUtils.indexOf(B,jb)};this.executeLayout(function(){Za.execute(N.getDefaultParent());Ra()},!0,ra);ra=null}else if("horizontaltree"==za||"verticaltree"==za||"auto"==za&&sa.length==2*B.length-1&&1==wa.length){N.view.validate();var Sa=new mxCompactTreeLayout(N,"horizontaltree"==za);Sa.levelDistance=ba;Sa.edgeRouting=!1;Sa.resetEdges=!1;this.executeLayout(function(){Sa.execute(N.getDefaultParent(),0<wa.length?wa[0]:null)},!0,ra);ra=null}else if("horizontalflow"==za||"verticalflow"==za||