Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,ma.y=N.offsetTop);this.showShapePicker(Math.max(this.diagramContainer.scrollLeft+Math.max(24,ma.x)),this.diagramContainer.scrollTop+ma.y,null,null,null,null,mxUtils.bind(this,function(Z){return f.getCenterInsertPoint(f.getBoundingBoxFromGeometry(Z,!0))}),"simple"==d,!1)}mxEvent.consume(ja)}));F.style.backgroundSize="24px";"simple"==d?F.style.flexShrink="0":F.style.marginBottom="4px";var H=!1,ka=mxUtils.bind(this,function(ja){if(ja||document.body.contains(k)){ja=function(da,P,V,l,A,O){null!=P&&da.setAttribute("title",
P);da.style.cursor="pointer";da.style.margin="simple"==d?"0px":"8px 0px 8px 2px";da.style.display="simple"==d?"inline-block":"block";k.appendChild(da);"simple"==d?da.style.opacity="0.7":null!=l&&(P=A,P=null!=P?P:30,O=null!=O?O:26,da.style.position="relative",da.style.overflow="visible",V=document.createElement("div"),V.style.position="absolute",V.style.fontSize="8px",V.style.left=P+"px",V.style.top=O+"px",mxUtils.write(V,l),da.appendChild(V));return da};k.innerText="";if(!H){var ma=window.innerWidth||