Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"\n":"")+Graph.svgDoctype+"\n"+mxUtils.getXml(l))});this.editor.graph.mathEnabled&&this.editor.addMathCss(p);var K=mxUtils.bind(this,function(l){x?(null==this.thumbImageCache&&(this.thumbImageCache={}),this.editor.convertImages(l,C,this.thumbImageCache)):C(l)});N?this.embedFonts(p,K):(this.editor.addFontCss(p),K(p))}catch(l){this.handleError(l)}};EditorUi.prototype.addRadiobox=function(d,g,n,q,t,x,B){return this.addCheckbox(d,n,q,t,x,B,!0,g)};EditorUi.prototype.addCheckbox=function(d,g,n,q,t,x,B,
G){x=null!=x?x:!0;var I=document.createElement("input");I.style.marginRight="8px";I.style.marginTop="16px";I.setAttribute("type",B?"radio":"checkbox");B="geCheckbox-"+Editor.guid();I.id=B;null!=G&&I.setAttribute("name",G);n&&(I.setAttribute("checked","checked"),I.defaultChecked=!0);q&&I.setAttribute("disabled","disabled");x&&(d.appendChild(I),n=document.createElement("label"),mxUtils.write(n,g),n.setAttribute("for",B),d.appendChild(n),t||mxUtils.br(d));return I};EditorUi.prototype.addEditButton=function(d,