Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
return'<div style="padding:2px;border:1px solid gray;background:yellow;border-radius:2px;">'+mxUtils.htmlEntities(l)+"</div>"};mxGraphView.prototype.redrawEnumerationState=function(l){var A="1"==mxUtils.getValue(l.style,"enumerate",0);A&&null==l.secondLabel?(l.secondLabel=new mxText("",new mxRectangle,mxConstants.ALIGN_LEFT,mxConstants.ALIGN_BOTTOM),l.secondLabel.size=12,l.secondLabel.state=l,l.secondLabel.dialect=mxConstants.DIALECT_STRICTHTML,this.graph.cellRenderer.initializeLabel(l,l.secondLabel)):
A||null==l.secondLabel||(l.secondLabel.destroy(),l.secondLabel=null);A=l.secondLabel;if(null!=A){var O=l.view.scale,X=this.createEnumerationValue(l);l=this.graph.model.isVertex(l.cell)?new mxRectangle(l.x+l.width-4*O,l.y+4*O,0,0):mxRectangle.fromPoint(l.view.getPoint(l));A.bounds.equals(l)&&A.value==X&&A.scale==O||(A.bounds=l,A.value=X,A.scale=O,A.redraw())}};var ea=mxGraphView.prototype.validateBackgroundPage;mxGraphView.prototype.validateBackgroundPage=function(){ea.apply(this,arguments);if(mxClient.IS_GC&&