Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxClient.IS_IE||mxClient.IS_IE11||mxClient.IS_FF&&mxClient.IS_WIN?"gray dotted 1px":""};var F=mxCellEditor.prototype.installListeners;mxCellEditor.prototype.installListeners=function(x){function J(fa,la){la.originalNode=fa;fa=fa.firstChild;for(var oa=la.firstChild;null!=fa&&null!=oa;)J(fa,oa),fa=fa.nextSibling,oa=oa.nextSibling;return la}function Q(fa,la){if(null!=fa)if(la.originalNode!=fa)Y(fa);else for(fa=fa.firstChild,la=la.firstChild;null!=fa;){var oa=fa.nextSibling;null==la?Y(fa):(Q(fa,la),la=
la.nextSibling);fa=oa}}function Y(fa){for(var la=fa.firstChild;null!=la;){var oa=la.nextSibling;Y(la);la=oa}1==fa.nodeType&&("BR"===fa.nodeName||null!=fa.firstChild)||3==fa.nodeType&&0!=mxUtils.trim(mxUtils.getTextContent(fa)).length?(3==fa.nodeType&&mxUtils.setTextContent(fa,mxUtils.getTextContent(fa).replace(/\n|\r/g,"")),1==fa.nodeType&&(fa.removeAttribute("style"),fa.removeAttribute("class"),fa.removeAttribute("width"),fa.removeAttribute("cellpadding"),fa.removeAttribute("cellspacing"),fa.removeAttribute("border"))):
fa.parentNode.removeChild(fa)}F.apply(this,arguments);7!==document.documentMode&&8!==document.documentMode&&mxEvent.addListener(this.textarea,"paste",mxUtils.bind(this,function(fa){var la=J(this.textarea,this.textarea.cloneNode(!0));window.setTimeout(mxUtils.bind(this,function(){null!=this.textarea&&(0<=this.textarea.innerHTML.indexOf("<o:OfficeDocumentSettings>")||0<=this.textarea.innerHTML.indexOf("\x3c!--[if !mso]>")?Q(this.textarea,la):Graph.removePasteFormatting(this.textarea.firstChild))}),
0)}))};mxCellEditor.prototype.toggleViewMode=function(){var x=this.graph.view.getState(this.editingCell);if(null!=x){var J=null!=x&&"0"!=mxUtils.getValue(x.style,"nl2Br","1"),Q=this.saveSelection();if(this.codeViewMode){wa=mxUtils.extractTextWithWhitespace(this.textarea.childNodes);0<wa.length&&"\n"==wa.charAt(wa.length-1)&&(wa=wa.substring(0,wa.length-1));wa=Graph.sanitizeHtml(J?wa.replace(/\n/g,"<br/>"):wa,!0);this.textarea.className="mxCellEditor geContentEditable";sa=mxUtils.getValue(x.style,