Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"";T.style.textOverflow="";T.style.whiteSpace="";T.style.cursor="text";T.style.color="";T.setAttribute("contentEditable","true");mxUtils.setPrefixedStyle(T.style,"user-select","text");T.focus();document.execCommand("selectAll",!1,null);t=function(){T.removeAttribute("contentEditable");T.style.cursor="pointer";X.title=T.innerHTML;I()};mxEvent.consume(fa)}};mxEvent.addListener(T,"click",S);mxEvent.addListener(M,"dblclick",S);c.appendChild(M);mxEvent.addListener(M,"dragstart",function(fa){null==V&&null!=