Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Oa+" ("+Xa.length+")",Ta=Oa=mxUtils.htmlEntities(Oa);15<Oa.length&&(Oa=Oa.substring(0,15)+"&hellip;");return{lbl:Oa+" ("+Xa.length+")",fullLbl:Sa,lblOnly:Ta}}function oa(Oa,Xa,Sa,Ta,Pa){mxEvent.addListener(Sa,"click",function(){z!=Sa&&(null!=z?(z.style.fontWeight="normal",z.style.textDecoration="none"):(ha.style.display="none",ea.style.minHeight="100%"),z=Sa,z.style.fontWeight="bold",z.style.textDecoration="underline",Ba.scrollTop=0,K&&(l=!0),sa.innerHTML=Xa,za.style.display="none",F(Pa?fa[Oa]:Ta?
Ea[Oa][Ta]:ja[Oa],Pa?!1:!0))})}var ia=C.querySelector(".geTemplatesList");if(0<ma){var ka="font-weight: bold;background: "+(Editor.isDarkMode()?"#060606":"#f9f9f9")+";padding: 5px 0 5px 0;text-align: center;margin-top: 10px;";ma=document.createElement("div");ma.style.cssText=ka;mxUtils.write(ma,mxResources.get("custom"));ia.appendChild(ma);for(var xa in fa){ma=document.createElement("div");var ua=fa[xa];ua=na(xa,ua);ma.className="geTemplateCatLink";ma.setAttribute("title",ua.fullLbl);ma.innerHTML=