Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ma.join(" ")}null!=ja?(M=ja,M.className+=" "+da,Q=la,na.className="geTempDlgCreateBtn"):(Q=M=null,na.className="geTempDlgCreateBtn geTempDlgBtnDisabled")}function C(ja,da){if(null!=Q){var la=function(wa){ka.isExternal?L(ka,function(sa){ma(sa,wa)},oa):ka.url?mxUtils.get(TEMPLATE_PATH+"/"+ka.url,mxUtils.bind(this,function(sa){200<=sa.getStatus()&&299>=sa.getStatus()?ma(sa.getText(),wa):oa()})):ma(b.emptyDiagramXml,wa)},ma=function(wa,sa){e||b.hideDialog(!0);f(wa,sa,ka,da)},oa=function(){k(mxResources.get("cannotLoad"));
ia()},ia=function(){Q=ka;na.className="geTempDlgCreateBtn";da&&(Aa.className="geTempDlgOpenBtn")},ka=Q;Q=null;"boolean"!==typeof da&&(da=ka.isExternal&&U);1==ja?K(ka.url,ka):da?(Aa.className="geTempDlgOpenBtn geTempDlgBtnDisabled geTempDlgBtnBusy",la()):(na.className="geTempDlgCreateBtn geTempDlgBtnDisabled geTempDlgBtnBusy",ja=null==b.mode||b.mode==App.MODE_GOOGLE||b.mode==App.MODE_BROWSER?mxResources.get("diagramName"):mxResources.get("filename"),ja=new FilenameDialog(b,b.defaultFilename+".drawio",
mxResources.get("ok"),la,ja,function(wa){var sa=null!=wa&&0<wa.length;return sa&&e?(la(wa),!1):sa},null,null,null,ia,c?null:[]),b.showDialog(ja.container,350,80,!0,!0),ja.init())}}function G(ja){na.innerText=mxResources.get(fa||ja?"create":"copy");ja=ja?"none":"";U&&(Aa.style.display=ja);for(var da=A.querySelectorAll(".geTempDlgLinkToDiagram"),la=0;la<da.length;la++)da[la].style.display=ja}function B(ja,da,la,ma,oa){oa||(aa.innerText="",y(),X=ja,Z=ma);var ia=null;if(la){ia=document.createElement("table");