Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var PopupDialog=function(b,e,f,c,k){k=null!=k?k:!0;var m=document.createElement("div");m.style.textAlign="left";m.style.height="100%";mxUtils.write(m,mxResources.get("fileOpenLocation"));mxUtils.br(m);mxUtils.br(m);var u=mxUtils.button(mxResources.get("openInThisWindow"),function(){k&&b.hideDialog();null!=c&&c()});u.className="geBtn";u.style.marginBottom="8px";u.style.width="280px";m.appendChild(u);mxUtils.br(m);var v=mxUtils.button(mxResources.get("openInNewWindow"),function(){k&&b.hideDialog();
null!=f&&f();b.openLink(e,null,!0)});v.className="geBtn gePrimaryBtn";v.style.width=u.style.width;m.appendChild(v);mxUtils.br(m);mxUtils.br(m);mxUtils.write(m,mxResources.get("allowPopups"));this.container=m},ImageDialog=function(b,e,f,c,k,m,u,v){function E(){0<L.value.length?x.removeAttribute("disabled"):x.setAttribute("disabled","disabled")}m=null!=m?m:!0;var D=b.editor.graph,A=document.createElement("div");mxUtils.write(A,e);e=document.createElement("div");e.className="geTitle";e.style.backgroundColor=