Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"click",sa):(mxEvent.addListener(va,"click",function(Na){B(va,null,null,da,wa)}),mxEvent.addListener(va,"dblclick",function(Na){G();mxEvent.consume(Na)}));null!=da&&(ia=g.cloneNode(!0),va.appendChild(ia),mxEvent.addGestureListeners(ia,mxUtils.bind(this,function(Na){M=b.sidebar.currentElt==va}),null,null),mxEvent.addListener(ia,"click",mxUtils.bind(this,function(Na){M||Ca(Na,null!=ma?ma:oa);mxEvent.consume(Na)})));ha.appendChild(va);return va}function R(){function da(Ca,va){Ca=mxResources.get(Ca,null,
Ca.substring(0,1).toUpperCase()+Ca.substring(1));18<Ca.length&&(Ca=Ca.substring(0,18)+"&hellip;");return Ca+(null!=va?" ("+va.length+")":"")}function la(Ca,va,Ma){mxEvent.addListener(va,"click",function(){Ka!=va&&(null!=Ka&&(Ka.style.backgroundColor=""),Ka=va,Ka.style.backgroundColor=z,ha.scrollTop=0,ha.innerText="",v=0,null!=ta[Ca].content?(ha.appendChild(ta[Ca].content),ca=ea,Ia=null,null!=ta[Ca].content.init&&ta[Ca].content.init()):(Ia=Ma?ua[Ca][Ma]:ta[Ca],S=null,t(!1)))});null!=urlParams["smart-template"]&&