Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"ellipsis";H.setAttribute("title",N.title+" ("+N.id+")");var m=document.createElement("input");m.setAttribute("type","checkbox");m.checked=b.sidebar.isEntryVisible(N.id);m.defaultChecked=m.checked;H.appendChild(m);mxUtils.write(H," "+N.title);E.appendChild(H);var v=function(A){if(null==A||"INPUT"!=mxEvent.getSource(A).nodeName){U.style.textAlign="center";U.style.padding="0px";U.style.color="";U.innerText="";if(null!=N.desc){var I=document.createElement("pre");I.style.boxSizing="border-box";I.style.fontFamily=
"inherit";I.style.margin="20px";I.style.right="0px";I.style.textAlign="left";mxUtils.write(I,N.desc);U.appendChild(I)}null!=N.imageCallback?N.imageCallback(U):null!=N.image?U.innerHTML+='<img border="0" style="max-width:100%;" src="'+N.image+'"/>':null==N.desc&&(U.style.padding="20px",U.style.color="rgb(179, 179, 179)",mxUtils.write(U,mxResources.get("noPreview")));null!=J&&(J.style.backgroundColor="");J=H;J.style.backgroundColor=Editor.isDarkMode()?"#000000":"#ebf2f9";null!=A&&mxEvent.consume(A)}};