Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
na=oa.substring(0,ia),null==ma)){var ka=oa.indexOf("/",ia+1);-1<ka&&(ma=oa.substring(ia+1,ka))}ia=Ga[na];null==ia&&(Ra++,ia=[],Ga[na]=ia);oa=ja.getAttribute("clibs");null!=fa[oa]&&(oa=fa[oa]);oa={url:ja.getAttribute("url"),libs:ja.getAttribute("libs"),title:ja.getAttribute("title")||ja.getAttribute("name"),preview:ja.getAttribute("preview"),clibs:oa,tags:ja.getAttribute("tags")};ia.push(oa);null!=ma&&(ia=Ea[na],null==ia&&(ia={},Ea[na]=ia),na=ia[ma],null==na&&(na=[],ia[ma]=na),na.push(oa))}ja=ja.nextSibling}R(Ga,
Qa,Ia)}})}function Q(ja){u&&(Ba.scrollTop=0,ba.innerText="",Fa.spin(ba),l=!1,K=!0,sa.innerText=mxResources.get("recentDiag"),Y=null,u(Va,function(){n(mxResources.get("cannotLoad"));Va([])},ja?null:m))}function P(ja){if(""==ja)null!=J&&(J.click(),J=null);else{if(null==TemplatesDialog.tagsList[c]){var fa={};for(Ka in Ga)for(var ma=Ga[Ka],na=0;na<ma.length;na++){var oa=ma[na];if(null!=oa.tags)for(var ia=oa.tags.toLowerCase().split(";"),ka=0;ka<ia.length;ka++)null==fa[ia[ka]]&&(fa[ia[ka]]=[]),fa[ia[ka]].push(oa)}TemplatesDialog.tagsList[c]=