Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
da.getAttribute("section");ma=da.getAttribute("subsection");if(null==oa&&(ka=ia.indexOf("/"),oa=ia.substring(0,ka),null==ma)){var wa=ia.indexOf("/",ka+1);-1<wa&&(ma=ia.substring(ka+1,wa))}ka=ta[oa];null==ka&&(ka=[],ta[oa]=ka);ia=da.getAttribute("clibs");null!=la[ia]&&(ia=la[ia]);ia={url:da.getAttribute("url"),libs:da.getAttribute("libs"),title:da.getAttribute("title"),tooltip:da.getAttribute("name")||da.getAttribute("url"),preview:da.getAttribute("preview"),clibs:ia,tags:da.getAttribute("tags")};
ka.push(ia);null!=ma&&(ka=ua[oa],null==ka&&(ka={},ua[oa]=ka),oa=ka[ma],null==oa&&(oa=[],ka[ma]=oa),oa.push(ia))}da=da.nextSibling}A.stop();R()}})};P.appendChild(pa);P.appendChild(xa);P.appendChild(ha);var Ua=!1,ja=E;/^https?:\/\//.test(ja)&&!b.editor.isCorsEnabledForUrl(ja)&&(ja=PROXY_URL+"?url="+encodeURIComponent(ja));A.spin(ha);null!=n?n(function(da,la){Da=da;T=Ea=la;Va()},Va):Va();W=ta}mxEvent.addListener(m,"keypress",function(da){b.dialog.container.firstChild==P&&13==da.keyCode&&G()});n=document.createElement("div");