Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,A.width,A.height),e.style+";rotatable=0;resizable=0;connectable=0;editable=0;movable=0;");H.vertex=!0;L.addCell(H);L.dblClick=function(P,M){if(null!=M&&M!=H)L.setSelectionCell(M);else{M=mxUtils.convertPoint(L.container,mxEvent.getClientX(P),mxEvent.getClientY(P));mxEvent.consume(P);P=L.view.scale;var p=L.view.translate;L.setSelectionCell(m((M.x-3*P)/P-p.x,(M.y-3*P)/P-p.y))}};k=new mxKeyHandler(L);k.bindKey(46,u);k.bindKey(8,u);L.getRubberband().isForceRubberbandEvent=function(P){return 0==P.evt.button&&
(null==P.getCell()||P.getCell()==H)};L.panningHandler.isForcePanningEvent=function(P){return 2==P.evt.button};var d=L.isCellSelectable;L.isCellSelectable=function(P){return P==H?!1:d.apply(this,arguments)};L.getLinkForCell=function(){return null};var g=L.view.getState(H);A=L.getAllConnectionConstraints(g);for(var n=0;null!=A&&n<A.length;n++){var q=L.getConnectionPoint(g,A[n]);m(q.x-3,q.y-3,A[n])}L.fit(8);L.center();n=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){L.zoomIn()},