Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
z.setAttribute("value",u.key);mxUtils.write(z,u.title);L.appendChild(z)}var B=!1;y();b.appendChild(L);mxUtils.br(b);b.appendChild(T);b.appendChild(M);var F=g,K=function(N,H){N=d[L.value];null!=N.format?(R.value=N.format.width/100,W.value=N.format.height/100,M.style.display="none",T.style.display=""):(T.style.display="none",M.style.display="");N=parseFloat(R.value);if(isNaN(N)||0>=N)R.value=g.width/100;N=parseFloat(W.value);if(isNaN(N)||0>=N)W.value=g.height/100;N=new mxRectangle(0,0,Math.floor(100*
parseFloat(R.value)),Math.floor(100*parseFloat(W.value)));"custom"!=L.value&&E.checked&&(N=new mxRectangle(0,0,N.height,N.width));H&&B||N.width==F.width&&N.height==F.height||(F=N,null!=n&&n(F))};mxEvent.addListener(e,"click",function(N){q.checked=!0;K(N);mxEvent.consume(N)});mxEvent.addListener(G,"click",function(N){E.checked=!0;K(N);mxEvent.consume(N)});mxEvent.addListener(R,"blur",K);mxEvent.addListener(R,"click",K);mxEvent.addListener(W,"blur",K);mxEvent.addListener(W,"click",K);mxEvent.addListener(E,