Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Y,x)});mxEvent.consume(Q)}));btn.style.height="12px";btn.style.width="40px";btn.className="geColorBtn";btn.appendChild(J);return btn}function ba(Ea,Ka,x,J,Q,Y,fa){null!=Ka&&(Ka=Ka.split(","),Ca.push({name:Ea,values:Ka,type:x,defVal:J,countProperty:Q,parentRow:Y,isDeletable:!0,flipBkg:fa}));btn=mxUtils.button("+",mxUtils.bind(pa,function(la){for(var oa=Y,wa=0;null!=oa.nextSibling;)if(oa.nextSibling.getAttribute("data-pName")==Ea)oa=oa.nextSibling,wa++;else break;var sa={type:x,parentRow:Y,index:wa,
isDeletable:!0,defVal:J,countProperty:Q};wa=ra(Ea,"",sa,0==wa%2,fa);X(Ea,J,sa);oa.parentNode.insertBefore(wa,oa.nextSibling);mxEvent.consume(la)}));btn.style.height="16px";btn.style.width="25px";btn.className="geColorBtn";return btn}function ia(Ea,Ka,x,J,Q,Y,fa){if(0<Q){var la=Array(Q);Ka=null!=Ka?Ka.split(","):[];for(var oa=0;oa<Q;oa++)la[oa]=null!=Ka[oa]?Ka[oa]:null!=J?J:"";Ca.push({name:Ea,values:la,type:x,defVal:J,parentRow:Y,flipBkg:fa,size:Q})}return document.createElement("div")}function qa(Ea,