Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.updateCustomLink(l,O)),aa=!0);aa&&this.labelChanged(A,X.innerHTML)}};Graph.prototype.updateCustomLink=function(l,A){if("data:action/json,"==A.substring(0,17))try{var O=JSON.parse(A.substring(17));null!=O.actions&&(this.updateCustomLinkActions(l,O.actions),A="data:action/json,"+JSON.stringify(O))}catch(X){}return A};Graph.prototype.updateCustomLinkActions=function(l,A){for(var O=0;O<A.length;O++){var X=A[O],U;for(U in X)this.updateCustomLinkAction(l,X[U],"cells"),this.updateCustomLinkAction(l,
X[U],"excludeCells")}};Graph.prototype.updateCustomLinkAction=function(l,A,O){if(null!=A&&null!=A[O]){for(var X=[],U=0;U<A[O].length;U++)if("*"==A[O][U])X.push(A[O][U]);else{var aa=l[A[O][U]];null!=aa?""!=aa&&X.push(aa):X.push(A[O][U])}A[O]=X}};Graph.prototype.getCellsForAction=function(l,A){A=this.getCellsById(l.cells).concat(this.getCellsForTags(l.tags,null,A));if(null!=l.excludeCells){for(var O=[],X=0;X<A.length;X++)0>l.excludeCells.indexOf(A[X].id)&&O.push(A[X]);A=O}return A};Graph.prototype.getCellsById=