Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"px";Ka.style.width=Ea.offsetWidth+"px";Ka.style.height=Ea.offsetHeight-(x?4:0)+"px";Ka.style.zIndex=5}function aa(Ea,Ka,x){var J=document.createElement("div");J.style.width="32px";J.style.height="4px";J.style.margin="2px";J.style.border="1px solid black";J.style.background=Ka&&"none"!=Ka?Ka:"url('"+Dialog.prototype.noColorImage+"')";btn=mxUtils.button("",mxUtils.bind(pa,function(Q){this.editorUi.pickColor(Ka,function(Y){J.style.background="none"==Y?"url('"+Dialog.prototype.noColorImage+"')":Y;X(Ea,
Y,x)});mxEvent.consume(Q)}));btn.style.height="12px";btn.style.width="40px";btn.className="geColorBtn";btn.appendChild(J);return btn}function ba(Ea,Ka,x,J,Q,Y,fa){null!=Ka&&(Ka=Ka.split(","),Ca.push({name:Ea,values:Ka,type:x,defVal:J,countProperty:Q,parentRow:Y,isDeletable:!0,flipBkg:fa}));btn=mxUtils.button("+",mxUtils.bind(pa,function(la){for(var oa=Y,wa=0;null!=oa.nextSibling;)if(oa.nextSibling.getAttribute("data-pName")==Ea)oa=oa.nextSibling,wa++;else break;var sa={type:x,parentRow:Y,index:wa,