Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
arguments);q()};q();var J=document.createElement("canvas");J.width=U.offsetWidth;J.height=U.offsetHeight;U.style.overflow="hidden";J.style.position="relative";U.appendChild(J);var c=J.getContext("2d");this.ui=b;var e=b.editor.graph;this.graph=e;this.container=U;this.canvas=J;var k=function(y,C,G,B,V){y=Math.round(y);C=Math.round(C);G=Math.round(G);B=Math.round(B);c.beginPath();c.moveTo(y+.5,C+.5);c.lineTo(G+.5,B+.5);c.stroke();V&&(l?(c.save(),c.translate(y,C),c.rotate(-Math.PI/2),c.fillText(V,0,0),
c.restore()):c.fillText(V,y,C))},n=function(){c.clearRect(0,0,J.width,J.height);c.beginPath();c.lineWidth=.7;c.strokeStyle=E.strokeClr;c.setLineDash([]);c.font="9px Arial";c.textAlign="center";var y=e.view.scale,C=e.view.getBackgroundPageBounds(),G=e.view.translate,B=e.pageVisible;G=B?L+(l?C.y-e.container.scrollTop:C.x-e.container.scrollLeft):L+(l?G.y*y-e.container.scrollTop:G.x*y-e.container.scrollLeft);var V=0;B&&(V=e.getPageLayout(),V=l?V.y*e.pageFormat.height:V.x*e.pageFormat.width);var R;switch(K.unit){case mxConstants.POINTS:var O=