Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ma[Xa],0<ja.length&&(oa=document.createElement("div"),oa.className="geTempDlgImportCat",oa.innerText=mxResources.get(Xa,null,Xa),aa.appendChild(oa),B(ja,da,la,null,!0))}function V(ja,da){pa.innerText="";y();var la=Math.floor(pa.offsetWidth/150)-1;da=!da&&ja.length>la?la:ja.length;for(var ma=0;ma<da;ma++){var oa=ja[ma];oa.isCategory=!0;var ia=document.createElement("div"),ka=mxResources.get(oa.title);null==ka&&(ka=oa.title.substring(0,1).toUpperCase()+oa.title.substring(1));ia.className="geTempDlgNewDiagramCatItem";
ia.setAttribute("title",ka);ka=mxUtils.htmlEntities(ka);15<ka.length&&(ka=ka.substring(0,15)+"&hellip;");null==M&&(G(!0),y(ia,"geTempDlgNewDiagramCatItemActive",oa));var wa=document.createElement("div");wa.className="geTempDlgNewDiagramCatItemImg";var sa=document.createElement("img");sa.src=NEW_DIAGRAM_CATS_PATH+"/"+oa.img;wa.appendChild(sa);ia.appendChild(wa);wa=document.createElement("div");wa.className="geTempDlgNewDiagramCatItemLbl";wa.innerHTML=ka;ia.appendChild(wa);pa.appendChild(ia);(function(Ja,
Ha){mxEvent.addListener(ia,"click",function(){M!=Ha&&(G(!0),y(Ha,"geTempDlgNewDiagramCatItemActive",Ja))});mxEvent.addListener(ia,"dblclick",C)})(oa,ia)}ia=document.createElement("div");ia.className="geTempDlgNewDiagramCatItem";ka=mxResources.get("showAllTemps");ia.setAttribute("title",ka);wa=document.createElement("div");wa.className="geTempDlgNewDiagramCatItemImg";wa.innerText="...";wa.style.fontSize="32px";ia.appendChild(wa);wa=document.createElement("div");wa.className="geTempDlgNewDiagramCatItemLbl";
wa.innerText=ka;ia.appendChild(wa);pa.appendChild(ia);mxEvent.addListener(ia,"click",function(){function Ja(){var ya=Ha.querySelector(".geTemplateDrawioCatLink");null!=ya?ya.click():setTimeout(Ja,200)}fa=!0;var Ha=A.querySelector(".geTemplatesList");Ha.style.display="block";Ba.style.width="";Fa.style.display="";Fa.value="";Y=null;Ja()});ca.style.display=ja.length<=la?"none":""}function R(ja,da,la){function ma(Oa,Xa){Oa=mxResources.get(Oa,null,Oa.substring(0,1).toUpperCase()+Oa.substring(1));var Qa=