Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
fa.getAttribute("section");na=fa.getAttribute("subsection");if(null==oa&&(ka=ia.indexOf("/"),oa=ia.substring(0,ka),null==na)){var xa=ia.indexOf("/",ka+1);-1<xa&&(na=ia.substring(ka+1,xa))}ka=ra[oa];null==ka&&(ka=[],ra[oa]=ka);ia=fa.getAttribute("clibs");null!=ma[ia]&&(ia=ma[ia]);ia={url:fa.getAttribute("url"),libs:fa.getAttribute("libs"),title:fa.getAttribute("title"),tooltip:fa.getAttribute("name")||fa.getAttribute("url"),preview:fa.getAttribute("preview"),clibs:ia,tags:fa.getAttribute("tags")};
ka.push(ia);null!=na&&(ka=va[oa],null==ka&&(ka={},va[oa]=ka),oa=ka[na],null==oa&&(oa=[],ka[na]=oa),oa.push(ia))}fa=fa.nextSibling}C.stop();R()}})};Q.appendChild(qa);Q.appendChild(ta);Q.appendChild(ha);var Ua=!1,ja=A;/^https?:\/\//.test(ja)&&!b.editor.isCorsEnabledForUrl(ja)&&(ja=PROXY_URL+"?url="+encodeURIComponent(ja));C.spin(ha);null!=q?q(function(fa,ma){Ga=fa;S=Ea=ma;Va()},Va):Va();V=ra}mxEvent.addListener(p,"keypress",function(fa){b.dialog.container.firstChild==Q&&13==fa.keyCode&&I()});q=document.createElement("div");