Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
L()?"":Editor.isDarkMode()?"#ff0000":"#ffcfcf"}catch(I){b.handleError(I)}});P.setAttribute("title",mxResources.get("find")+" (Enter)");P.style.float="none";P.style.width="120px";P.style.marginTop="6px";P.style.marginLeft="8px";P.style.overflow="hidden";P.style.textOverflow="ellipsis";P.className="geBtn gePrimaryBtn";y.appendChild(P);var N=document.createElement("div");N.style.marginTop="10px";if(u){var H=function(I,g,x,F,M){if(null==M||"1"!=M.html)return F=I.toLowerCase().indexOf(g,F),0>F?I:I.substr(0,
F)+x+I.substr(F+g.length);var Q=I;g=mxUtils.htmlEntities(g);M=[];var S=-1;for(I=I.replace(/<br>/ig,"\n");-1<(S=I.indexOf("<",S+1));)M.push(S);S=I.match(/<[^>]*>/g);I=I.replace(/<[^>]*>/g,"");F=I.toLowerCase().indexOf(g,F);if(0>F)return Q;Q=F+g.length;x=mxUtils.htmlEntities(x);I=I.substr(0,F)+x+I.substr(Q);for(var W=0,T=0;T<M.length;T++){if(M[T]-W<F)I=I.substr(0,M[T])+S[T]+I.substr(M[T]);else{var X=M[T]-W<Q?F+W:M[T]+(x.length-g.length);I=I.substr(0,X)+S[T]+I.substr(X)}W+=S[T].length}return I.replace(/\n/g,
"<br>")},m=mxUtils.button(mxResources.get("replFind"),function(){try{if(null!=k&&null!=J){var I=J.cell,g=E.getLabel(I);E.isCellEditable(I)&&E.model.setValue(I,H(g,k,G.value,n-k.length,E.getCurrentCellStyle(I)));C.style.backgroundColor=L(!1,!0)?"":Editor.isDarkMode()?"#ff0000":"#ffcfcf"}}catch(x){b.handleError(x)}});m.setAttribute("title",mxResources.get("replFind"));m.style.float="none";m.style.width="120px";m.style.marginTop="6px";m.style.marginLeft="8px";m.style.overflow="hidden";m.style.textOverflow=