Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
y:P.constObj.point.y,dx:P.constObj.dx,dy:P.constObj.dy};var M=0,p=0,y=H.geometry,C=mxUtils.format((P.geometry.x+3-y.x)/y.width);P=mxUtils.format((P.geometry.y+3-y.y)/y.height);0>C?(M=C*y.width,C=0):1<C&&(M=(C-1)*y.width,C=1);0>P?(p=P*y.height,P=0):1<P&&(p=(P-1)*y.height,P=1);return{x:C,y:P,dx:parseInt(M),dy:parseInt(p)}}function D(P){if(1==L.getSelectionCount()){var M=L.getSelectionCell();P&&(M.constObj=null);P=E(M);U.value=100*P.x;N.value=100*P.y;R.value=P.dx;Q.value=P.dy;F.style.visibility=""}else F.style.visibility=