Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
(ka?"geTempDlgRadioBtnLarge":"geTempDlgRadioBtnSmall");C.querySelector("."+fa).src="/images/"+ma+"-sel.svg";C.querySelector("."+oa).src="/images/"+ia+".svg";return!0}function x(ja,fa,ma,na){function oa(ua,Ka){null==ka?(ua=/^https?:\/\//.test(ua)&&!b.editor.isCorsEnabledForUrl(ua)?PROXY_URL+"?url="+encodeURIComponent(ua):TEMPLATE_PATH+"/"+ua,mxUtils.get(ua,mxUtils.bind(this,function(Ja){200<=Ja.getStatus()&&299>=Ja.getStatus()&&(ka=Ja.getText());Ka(ka)}))):Ka(ka)}function ia(ua,Ka,Ja){if(null!=ua&&
mxUtils.isAncestorNode(document.body,fa)&&(ua=mxUtils.parseXml(ua),ua=Editor.extractGraphModel(ua.documentElement,!0),null!=ua)){"mxfile"==ua.nodeName&&(ua=Editor.parseDiagramNode(ua.getElementsByTagName("diagram")[0]));var Aa=new mxCodec(ua.ownerDocument),La=new mxGraphModel;Aa.decode(ua,La);ua=La.root.getChildAt(0).children||[];b.sidebar.createTooltip(fa,ua,Math.min((window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth)-80,1E3),Math.min((window.innerHeight||document.documentElement.clientHeight||
document.body.clientHeight)-80,800),null!=ja.title?mxResources.get(ja.title,null,ja.title):null,!0,new mxPoint(Ka,Ja),!0,null,!0);var Da=document.createElement("div");Da.className="geTempDlgDialogMask";C.appendChild(Da);var wa=b.sidebar.hideTooltip;b.sidebar.hideTooltip=function(){Da&&(C.removeChild(Da),Da=null,wa.apply(this,arguments),b.sidebar.hideTooltip=wa)};mxEvent.addListener(Da,"click",function(){b.sidebar.hideTooltip()})}}var ka=null;if(pa||b.sidebar.currentElt==fa)b.sidebar.hideTooltip();