Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
wa.length;sa<Ka;sa++)wa.push(oa);wa=wa.join(",");xa.setCellStyles(x.dependentProps[Ea],wa,xa.getSelectionCells());Q.push(x.dependentProps[Ea]);Y.push(wa)}if("function"==typeof x.onChange)x.onChange(xa,Ka);pa.editorUi.fireEvent(new mxEventObject("styleChanged","keys",Q,"values",Y,"cells",xa.getSelectionCells()))}finally{xa.getModel().endUpdate()}}function U(Ea,Ka,x){var J=mxUtils.getOffset(l,!0),Q=mxUtils.getOffset(Ea,!0);Ka.style.position="absolute";Ka.style.left=Q.x-J.x+"px";Ka.style.top=Q.y-J.y+
"px";Ka.style.width=Ea.offsetWidth+"px";Ka.style.height=Ea.offsetHeight-(x?4:0)+"px";Ka.style.zIndex=5}function aa(Ea,Ka,x){var J=document.createElement("div");J.style.width="32px";J.style.height="4px";J.style.margin="2px";J.style.border="1px solid black";J.style.background=Ka&&"none"!=Ka?Ka:"url('"+Dialog.prototype.noColorImage+"')";btn=mxUtils.button("",mxUtils.bind(pa,function(Q){this.editorUi.pickColor(Ka,function(Y){J.style.background="none"==Y?"url('"+Dialog.prototype.noColorImage+"')":Y;X(Ea,