Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Da;var Ea=ba.gridSize*ta.gridSteps*T,Ta=ba.getGraphBounds(),Ka=ta.translate.x*ua,Sa=ta.translate.y*ua,Ia=Ka+(Ta.x-Ka)/ua-fa,Va=Sa+(Ta.y-Sa)/ua-fa,Ua=new Image;Ua.onload=function(){try{for(var ja=-Math.round(Ea-mxUtils.mod((Ka-Ia)*T,Ea)),da=-Math.round(Ea-mxUtils.mod((Sa-Va)*T,Ea));ja<xa;ja+=Ea)for(var la=da;la<Ga;la+=Ea)qa.drawImage(Ua,ja/T,la/T);Aa()}catch(ma){null!=Q&&Q(ma)}};Ua.onerror=function(ja){null!=Q&&Q(ja)};Ua.src=Da}else Aa()}catch(ja){null!=Q&&Q(ja)}});pa.onerror=function(Aa){null!=Q&&
Q(Aa)};Z&&this.graph.addSvgShadow(ha);this.graph.mathEnabled&&this.addMathCss(ha);var na=mxUtils.bind(this,function(){try{null!=this.resolvedFontCss&&this.addFontCss(ha,this.resolvedFontCss),pa.src=Editor.createSvgDataUri(mxUtils.getXml(ha))}catch(Aa){null!=Q&&Q(Aa)}});this.embedExtFonts(mxUtils.bind(this,function(Aa){try{null!=Aa&&this.addFontCss(ha,Aa),this.loadFonts(na)}catch(Fa){null!=Q&&Q(Fa)}}))}catch(Aa){null!=Q&&Q(Aa)}}),F,Y)}catch(ha){null!=Q&&Q(ha)}};Editor.crcTable=[];for(var q=0;256>q;q++)for(var u=