Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"click",ua):(mxEvent.addListener(wa,"click",function(Na){F(wa,null,null,fa,xa)}),mxEvent.addListener(wa,"dblclick",function(Na){I();mxEvent.consume(Na)}));null!=fa&&(ia=l.cloneNode(!0),wa.appendChild(ia),mxEvent.addGestureListeners(ia,mxUtils.bind(this,function(Na){O=b.sidebar.currentElt==wa}),null,null),mxEvent.addListener(ia,"click",mxUtils.bind(this,function(Na){O||Da(Na,null!=na?na:oa);mxEvent.consume(Na)})));ha.appendChild(wa);return wa}function R(){function fa(Da,wa){Da=mxResources.get(Da,null,
Da.substring(0,1).toUpperCase()+Da.substring(1));18<Da.length&&(Da=Da.substring(0,18)+"&hellip;");return Da+(null!=wa?" ("+wa.length+")":"")}function ma(Da,wa,Ma){mxEvent.addListener(wa,"click",function(){Ha!=wa&&(null!=Ha&&(Ha.style.backgroundColor=""),Ha=wa,Ha.style.backgroundColor=u,ha.scrollTop=0,ha.innerText="",y=0,null!=ra[Da].content?(ha.appendChild(ra[Da].content),da=ea,Ia=null,null!=ra[Da].content.init&&ra[Da].content.init()):(Ia=Ma?va[Da][Ma]:ra[Da],W=null,x(!1)))});null!=urlParams["smart-template"]&&