Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
d,x.pasteCounter=0);var G=x.pasteCounter*x.gridSize;if(n||this.isCompatibleString(d))B=this.importXml(d,G,G),x.setSelectionCells(B);else if(g&&1==x.getSelectionCount()){t=x.getStartEditingCell(x.getSelectionCell(),q);if(/\.(gif|jpg|jpeg|tiff|png|svg)$/i.test(d)&&"image"==x.getCurrentCellStyle(t)[mxConstants.STYLE_SHAPE])x.setCellStyles(mxConstants.STYLE_IMAGE,d,[t]);else{x.model.beginUpdate();try{x.labelChanged(t,d),Graph.isLink(d)&&x.setLinkForCell(t,d)}finally{x.model.endUpdate()}}x.setSelectionCell(t)}else B=
x.getInsertPoint(),x.isMouseInsertPoint()&&(G=0,x.lastPasteXml==d&&0<x.pasteCounter&&x.pasteCounter--),B=this.insertTextAt(d,B.x+G,B.y+G,t),x.setSelectionCells(B);x.isSelectionEmpty()||(x.scrollCellToVisible(x.getSelectionCell()),null!=this.hoverIcons&&this.hoverIcons.update(x.view.getState(x.getSelectionCell())));return B};EditorUi.prototype.pasteCells=function(d,g,n,q){if(!mxEvent.isConsumed(d)){var t=g,x=!1;if(n&&null!=d.clipboardData&&d.clipboardData.getData){var B=d.clipboardData.getData("text/plain"),