Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(ca){"true"!=S.getAttribute("contentEditable")&&mxEvent.consume(ca)});W=function(ca){if(mxClient.IS_IOS||mxClient.IS_FF||!(null==document.documentMode||9<document.documentMode)){var da=new FilenameDialog(b,X.title||"",mxResources.get("ok"),function(ba){null!=ba&&(X.title=ba,K())},mxResources.get("enterValue"));b.showDialog(da.container,300,80,!0,!0);da.init();mxEvent.consume(ca)}else if("true"!=S.getAttribute("contentEditable")){null!=x&&(x(),x=null);if(null==X.title||0==X.title.length)S.innerText=
"";S.style.textOverflow="";S.style.whiteSpace="";S.style.cursor="text";S.style.color="";S.setAttribute("contentEditable","true");mxUtils.setPrefixedStyle(S.style,"user-select","text");S.focus();document.execCommand("selectAll",!1,null);x=function(){S.removeAttribute("contentEditable");S.style.cursor="pointer";X.title=S.innerHTML;K()};mxEvent.consume(ca)}};mxEvent.addListener(S,"click",W);mxEvent.addListener(O,"dblclick",W);d.appendChild(O);mxEvent.addListener(O,"dragstart",function(ca){null==U&&null!=