Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,E.width,E.height),f.style+";rotatable=0;resizable=0;connectable=0;editable=0;movable=0;");J.vertex=!0;U.addCell(J);U.dblClick=function(N,H){if(null!=H&&H!=J)U.setSelectionCell(H);else{H=mxUtils.convertPoint(U.container,mxEvent.getClientX(N),mxEvent.getClientY(N));mxEvent.consume(N);N=U.view.scale;var m=U.view.translate;U.setSelectionCell(u((H.x-3*N)/N-m.x,(H.y-3*N)/N-m.y))}};q=new mxKeyHandler(U);q.bindKey(46,z);q.bindKey(8,z);U.getRubberband().isForceRubberbandEvent=function(N){return 0==N.evt.button&&
(null==N.getCell()||N.getCell()==J)};U.panningHandler.isForcePanningEvent=function(N){return 2==N.evt.button};var c=U.isCellSelectable;U.isCellSelectable=function(N){return N==J?!1:c.apply(this,arguments)};U.getLinkForCell=function(){return null};var e=U.view.getState(J);E=U.getAllConnectionConstraints(e);for(var k=0;null!=E&&k<E.length;k++){var n=U.getConnectionPoint(e,E[k]);u(n.x-3,n.y-3,E[k])}U.fit(8);U.center();k=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){U.zoomIn()},