Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
y:N.constObj.point.y,dx:N.constObj.dx,dy:N.constObj.dy};var H=0,m=0,v=J.geometry,A=mxUtils.format((N.geometry.x+3-v.x)/v.width);N=mxUtils.format((N.geometry.y+3-v.y)/v.height);0>A?(H=A*v.width,A=0):1<A&&(H=(A-1)*v.width,A=1);0>N?(m=N*v.height,N=0):1<N&&(m=(N-1)*v.height,N=1);return{x:A,y:N,dx:parseInt(H),dy:parseInt(m)}}function K(N){if(1==U.getSelectionCount()){var H=U.getSelectionCell();N&&(H.constObj=null);N=L(H);V.value=100*N.x;O.value=100*N.y;R.value=N.dx;P.value=N.dy;B.style.visibility=""}else B.style.visibility=