Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Qa=[],Oa=0;Oa<Ma.length;Oa++)ia.isCellVisible(Ma[Oa])&&Qa.push(Ma[Oa]);ia.setSelectionCells(Qa)}function aa(Ma){ia.setHiddenTags(Ma?[]:qa.slice());U();ia.refresh()}function ba(Ma,Qa){pa.innerText="";if(0<Ma.length){var Oa=document.createElement("table");Oa.setAttribute("cellpadding","2");Oa.style.boxSizing="border-box";Oa.style.tableLayout="fixed";Oa.style.width="100%";var ta=document.createElement("tbody");if(null!=Ma&&0<Ma.length)for(var Da=0;Da<Ma.length;Da++)(function(Ba){function ya(){var Ka=
ia.getCellsForTags([Ba],null,null,!0);ia.isEnabled()?ia.setSelectionCells(Ka):ia.highlightCells(Ka,null,null,70)}var Va=0>mxUtils.indexOf(ia.hiddenTags,Ba),Wa=document.createElement("tr"),La=document.createElement("td");La.style.align="center";La.style.width="16px";var $a=document.createElement("img");$a.setAttribute("src",Va?Editor.visibleImage:Editor.hiddenImage);$a.setAttribute("title",mxResources.get(Va?"hideIt":"show",[Ba]));mxUtils.setOpacity($a,Va?75:25);$a.style.verticalAlign="middle";$a.style.cursor=