Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
AspectDialog.prototype.createViewer=function(b,e,f,c){mxEvent.disableContextMenu(b);b.style.userSelect="none";var k=new Graph(b);k.setTooltips(!1);k.setEnabled(!1);k.setPanning(!1);k.minFitScale=null;k.maxFitScale=null;k.centerZoom=!0;e="mxGraphModel"==e.nodeName?e:Editor.parseDiagramNode(e);if(null!=e){var m=e.getAttribute("background");if(null==m||""==m||m==mxConstants.NONE)m=null!=c?c:"#ffffff";b.style.backgroundColor=m;c=new mxCodec(e.ownerDocument);b=k.getModel();c.decode(e,b);e=b.getChildCount(b.root);
c=null==f;for(m=0;m<e;m++){var u=b.getChildAt(b.root,m);b.setVisible(u,c||f==u.id)}k.maxFitScale=1;k.fit(0);k.center()}return k};