Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"ellipsis";M.setAttribute("title",P.title+" ("+P.id+")");var p=document.createElement("input");p.setAttribute("type","checkbox");p.checked=b.sidebar.isEntryVisible(P.id);p.defaultChecked=p.checked;M.appendChild(p);mxUtils.write(M," "+P.title);A.appendChild(M);var y=function(C){if(null==C||"INPUT"!=mxEvent.getSource(C).nodeName){L.style.textAlign="center";L.style.padding="0px";L.style.color="";L.innerText="";if(null!=P.desc){var K=document.createElement("pre");K.style.boxSizing="border-box";K.style.fontFamily=
"inherit";K.style.margin="20px";K.style.right="0px";K.style.textAlign="left";mxUtils.write(K,P.desc);L.appendChild(K)}null!=P.imageCallback?P.imageCallback(L):null!=P.image?L.innerHTML+='<img border="0" style="max-width:100%;" src="'+P.image+'"/>':null==P.desc&&(L.style.padding="20px",L.style.color="rgb(179, 179, 179)",mxUtils.write(L,mxResources.get("noPreview")));null!=H&&(H.style.backgroundColor="");H=M;H.style.backgroundColor=Editor.isDarkMode()?"#000000":"#ebf2f9";null!=C&&mxEvent.consume(C)}};