Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
if(0==U&&0==F)U=M,F=1;else if(Math.abs(U-M)<=(p||1==t&&P?g:0))F+=1;else if(1<F&&P){q=q.slice(0,t+1);break}else if(3<=q.length-t&&!P)F=0,R=U=0!=N?N:0,q.splice(0,0==t?1:t),t=-1;else break;0!=R||p||(U=R=M)}3==q.length&&q[1]==H&&(R=0)}g=function(y,C,K,l){var z=[];if(l){l=Q;var J=0}else l=0,J=Q;z.push(new mxPoint(y.x-l,y.y-J));z.push(new mxPoint(y.x+l,y.y+J));z.push(y);z.push(C);z.push(new mxPoint(C.x-l,C.y-J));z.push(new mxPoint(C.x+l,C.y+J));if(null!=K)return K.points=z,K;y=new mxPolyline(z,mxConstants.GUIDE_COLOR,
mxConstants.GUIDE_STROKEWIDTH);y.dialect=mxConstants.DIALECT_SVG;y.pointerEvents=!1;y.init(L.graph.getView().getOverlayPane());return y};U=function(y,C){if(y&&null!=L.guidesArrHor)for(y=0;y<L.guidesArrHor.length;y++)L.guidesArrHor[y].node.style.visibility="hidden";if(C&&null!=L.guidesArrVer)for(y=0;y<L.guidesArrVer.length;y++)L.guidesArrVer[y].node.style.visibility="hidden"};if(1<F&&F==q.length-1){F=[];N=L.guidesArrHor;D=[];E=0;t=q[0]==H?1:0;P=q[t].y+q[t].height;if(0<R)for(t=0;t<q.length-1;t++)d=