Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.updateCustomLink(l,O)),aa=!0);aa&&this.labelChanged(A,X.innerHTML)}};Graph.prototype.updateCustomLink=function(l,A){if("data:action/json,"==A.substring(0,17))try{var O=JSON.parse(A.substring(17));null!=O.actions&&(this.updateCustomLinkActions(l,O.actions),A="data:action/json,"+JSON.stringify(O))}catch(X){}return A};Graph.prototype.updateCustomLinkActions=function(l,A){for(var O=0;O<A.length;O++){var X=A[O],U;for(U in X)this.updateCustomLinkAction(l,X[U],"cells"),this.updateCustomLinkAction(l,