Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"keys",Ea,"values",Ta,"cells",ba.getSelectionCells()))}finally{ba.getModel().endUpdate()}}function Q(qa,ta,ua){var Da=mxUtils.getOffset(g,!0),Ea=mxUtils.getOffset(qa,!0);ta.style.position="absolute";ta.style.left=Ea.x-Da.x+"px";ta.style.top=Ea.y-Da.y+"px";ta.style.width=qa.offsetWidth+"px";ta.style.height=qa.offsetHeight-(ua?4:0)+"px";ta.style.zIndex=5}function S(qa,ta,ua){var Da=document.createElement("div");Da.style.width="32px";Da.style.height="4px";Da.style.margin="2px";Da.style.border="1px solid black";