Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
n=Graph.prototype.shadowId;Graph.prototype.shadowId="lightboxDropShadow";var y=new EditorUi(new Editor(!0),document.createElement("div"),!0);this.darkMode&&y.setDarkMode(!0);y.editor.editBlankUrl=this.editBlankUrl;y.editor.graph.shadowId="lightboxDropShadow";Graph.prototype.shadowId=n;y.refresh=function(){};var q=mxUtils.bind(this,function(W){27==W.keyCode&&y.destroy()}),E=this.initialOverflow,L=y.destroy;y.destroy=function(){null==b&&(mxEvent.removeListener(document.documentElement,"keydown",q),
document.body.removeChild(e),document.body.removeChild(g),document.body.style.overflow=E,GraphViewer.resizeSensorEnabled=!0,L.apply(this,arguments))};var T=y.editor.graph,G=T.container;G.style.overflow="hidden";this.lightboxChrome&&null==b?(G.style.border="1px solid #c0c0c0",G.style.margin="40px",mxEvent.addListener(document.documentElement,"keydown",q)):(e.style.display="none",g.style.display="none");var M=this;T.getImageFromBundles=function(W){return M.getImageUrl(W)};var R=y.createTemporaryGraph;