Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.executingCustomActions=!1,ba(),null!=A&&A()});qa()}};Graph.prototype.doUpdateCustomLinksForCell=function(l,A){var O=this.getLinkForCell(A);null!=O&&"data:action/json,"==O.substring(0,17)&&this.setLinkForCell(A,this.updateCustomLink(l,O));if(this.isHtmlLabel(A)){var X=document.createElement("div");X.innerHTML=Graph.sanitizeHtml(this.getLabel(A));for(var U=X.getElementsByTagName("a"),aa=!1,ba=0;ba<U.length;ba++)O=U[ba].getAttribute("href"),null!=O&&"data:action/json,"==O.substring(0,17)&&(U[ba].setAttribute("href",
this.updateCustomLink(l,O)),aa=!0);aa&&this.labelChanged(A,X.innerHTML)}};Graph.prototype.updateCustomLink=function(l,A){if("data:action/json,"==A.substring(0,17))try{var O=JSON.parse(A.substring(17));null!=O.actions&&(this.updateCustomLinkActions(l,O.actions),A="data:action/json,"+JSON.stringify(O))}catch(X){}return A};Graph.prototype.updateCustomLinkActions=function(l,A){for(var O=0;O<A.length;O++){var X=A[O],U;for(U in X)this.updateCustomLinkAction(l,X[U],"cells"),this.updateCustomLinkAction(l,