Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
na.join(" ")}null!=ja?(O=ja,O.className+=" "+fa,T=ma,la.className="geTempDlgCreateBtn"):(T=O=null,la.className="geTempDlgCreateBtn geTempDlgBtnDisabled")}function G(ja,fa){if(null!=T){var ma=function(xa){ka.isExternal?E(ka,function(ua){na(ua,xa)},oa):ka.url?mxUtils.get(TEMPLATE_PATH+"/"+ka.url,mxUtils.bind(this,function(ua){200<=ua.getStatus()&&299>=ua.getStatus()?na(ua.getText(),xa):oa()})):na(b.emptyDiagramXml,xa)},na=function(xa,ua){g||b.hideDialog(!0);e(xa,ua,ka,fa)},oa=function(){n(mxResources.get("cannotLoad"));
ia()},ia=function(){T=ka;la.className="geTempDlgCreateBtn";fa&&(ya.className="geTempDlgOpenBtn")},ka=T;T=null;"boolean"!==typeof fa&&(fa=ka.isExternal&&L);1==ja?D(ka.url,ka):fa?(ya.className="geTempDlgOpenBtn geTempDlgBtnDisabled geTempDlgBtnBusy",ma()):(la.className="geTempDlgCreateBtn geTempDlgBtnDisabled geTempDlgBtnBusy",ja=null==b.mode||b.mode==App.MODE_GOOGLE||b.mode==App.MODE_BROWSER?mxResources.get("diagramName"):mxResources.get("filename"),ja=new FilenameDialog(b,b.defaultFilename+".drawio",
mxResources.get("ok"),ma,ja,function(xa){var ua=null!=xa&&0<xa.length;return ua&&g?(ma(xa),!1):ua},null,null,null,ia,d?null:[]),b.showDialog(ja.container,350,80,!0,!0),ja.init())}}function I(ja){la.innerText=mxResources.get(ca||ja?"create":"copy");ja=ja?"none":"";L&&(ya.style.display=ja);for(var fa=C.querySelectorAll(".geTempDlgLinkToDiagram"),ma=0;ma<fa.length;ma++)fa[ma].style.display=ja}function F(ja,fa,ma,na,oa){oa||(ba.innerText="",B(),X=ja,Z=na);var ia=null;if(ma){ia=document.createElement("table");