Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
na[Xa],0<ja.length&&(oa=document.createElement("div"),oa.className="geTempDlgImportCat",oa.innerText=mxResources.get(Xa,null,Xa),ba.appendChild(oa),F(ja,fa,ma,null,!0))}function U(ja,fa){qa.innerText="";B();var ma=Math.floor(qa.offsetWidth/150)-1;fa=!fa&&ja.length>ma?ma:ja.length;for(var na=0;na<fa;na++){var oa=ja[na];oa.isCategory=!0;var ia=document.createElement("div"),ka=mxResources.get(oa.title);null==ka&&(ka=oa.title.substring(0,1).toUpperCase()+oa.title.substring(1));ia.className="geTempDlgNewDiagramCatItem";
ia.setAttribute("title",ka);ka=mxUtils.htmlEntities(ka);15<ka.length&&(ka=ka.substring(0,15)+"&hellip;");null==O&&(I(!0),B(ia,"geTempDlgNewDiagramCatItemActive",oa));var xa=document.createElement("div");xa.className="geTempDlgNewDiagramCatItemImg";var ua=document.createElement("img");ua.src=NEW_DIAGRAM_CATS_PATH+"/"+oa.img;xa.appendChild(ua);ia.appendChild(xa);xa=document.createElement("div");xa.className="geTempDlgNewDiagramCatItemLbl";xa.innerHTML=ka;ia.appendChild(xa);qa.appendChild(ia);(function(Ka,
Ja){mxEvent.addListener(ia,"click",function(){O!=Ja&&(I(!0),B(Ja,"geTempDlgNewDiagramCatItemActive",Ka))});mxEvent.addListener(ia,"dblclick",G)})(oa,ia)}ia=document.createElement("div");ia.className="geTempDlgNewDiagramCatItem";ka=mxResources.get("showAllTemps");ia.setAttribute("title",ka);xa=document.createElement("div");xa.className="geTempDlgNewDiagramCatItemImg";xa.innerText="...";xa.style.fontSize="32px";ia.appendChild(xa);xa=document.createElement("div");xa.className="geTempDlgNewDiagramCatItemLbl";
xa.innerText=ka;ia.appendChild(xa);qa.appendChild(ia);mxEvent.addListener(ia,"click",function(){function Ka(){var Aa=Ja.querySelector(".geTemplateDrawioCatLink");null!=Aa?Aa.click():setTimeout(Ka,200)}ca=!0;var Ja=C.querySelector(".geTemplatesList");Ja.style.display="block";Ba.style.width="";Ca.style.display="";Ca.value="";Y=null;Ka()});da.style.display=ja.length<=ma?"none":""}function R(ja,fa,ma){function na(Oa,Xa){Oa=mxResources.get(Oa,null,Oa.substring(0,1).toUpperCase()+Oa.substring(1));var Sa=