Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
d.menus.createPopupMenu=function(Z,S,da){u.apply(this,arguments);if(1==f.getSelectionCount()){S=f.getSelectionCell();var P=f.getOutgoingTreeEdges(S);Z.addSeparator();0<P.length&&(n(f.getSelectionCell())&&this.addMenuItems(Z,["selectChildren"],null,da),this.addMenuItems(Z,["selectDescendants"],null,da));n(f.getSelectionCell())?(Z.addSeparator(),0<f.getIncomingTreeEdges(S).length&&this.addMenuItems(Z,["selectSiblings","selectParent"],null,da)):0<f.model.getEdgeCount(S)&&this.addMenuItems(Z,["selectConnections"],
null,da)}};d.actions.addAction("selectChildren",function(Z){if(f.isEnabled()&&1==f.getSelectionCount()){var S=f.getSelectionCell();Z=mxEvent.isControlDown(Z)?null:f.getOutgoingTreeEdges(S);if(null!=Z&&0<Z.length){S=[];for(var da=0;da<Z.length;da++)S.push(f.model.getTerminal(Z[da],!1));f.setSelectionCells(S)}else f.setSelectionCells(f.model.getChildren(S))}},null,null,"Alt+Shift+C");d.actions.addAction("selectDescendants",function(Z){var S=f.getSelectionCell();if(f.isEnabled()&&null!=S){var da=[];