Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Ta,Ia)}})}function P(ja){z&&(Ba.scrollTop=0,aa.innerText="",Ga.spin(aa),g=!1,I=!0,ra.innerText=mxResources.get("recentDiag"),Y=null,z(Va,function(){k(mxResources.get("cannotLoad"));Va([])},ja?null:u))}function N(ja){if(""==ja)null!=F&&(F.click(),F=null);else{if(null==TemplatesDialog.tagsList[d]){var da={};for(Ja in Da)for(var la=Da[Ja],ma=0;ma<la.length;ma++){var oa=la[ma];if(null!=oa.tags)for(var ia=oa.tags.toLowerCase().split(";"),ka=0;ka<ia.length;ka++)null==da[ia[ka]]&&(da[ia[ka]]=[]),da[ia[ka]].push(oa)}TemplatesDialog.tagsList[d]=
da}var wa=ja.toLowerCase().split(" ");da=TemplatesDialog.tagsList[d];if(0<Ia&&null==da.__tagsList__){for(Ja in Ta)for(la=Ta[Ja],ma=0;ma<la.length;ma++)for(oa=la[ma],ia=oa.title.split(" "),ia.push(Ja),ka=0;ka<ia.length;ka++){var sa=ia[ka].toLowerCase();null==da[sa]&&(da[sa]=[]);da[sa].push(oa)}da.__tagsList__=!0}var Ja=[];la={};for(ma=ia=0;ma<wa.length;ma++)if(0<wa[ma].length){sa=da[wa[ma]];var Ha={};Ja=[];if(null!=sa)for(ka=0;ka<sa.length;ka++)oa=sa[ka],0==ia==(null==la[oa.url])&&(Ha[oa.url]=!0,Ja.push(oa));
la=Ha;ia++}0==Ja.length?ra.innerText=mxResources.get("noResultsFor",[ja]):B(Ja,!0)}}function H(ja){if(Y!=ja||W!=ba)n(),Ba.scrollTop=0,aa.innerText="",ra.innerText=mxResources.get("searchResults")+' "'+ja+'"',Ua=null,fa?N(ja):D&&(ja?(Ga.spin(aa),g=!1,I=!0,D(ja,Va,function(){k(mxResources.get("searchFailed"));Va([])},W?null:u)):P(W)),Y=ja,ba=W}function m(ja){null!=Ua&&clearTimeout(Ua);13==ja.keyCode?H(Fa.value):Ua=setTimeout(function(){H(Fa.value)},1E3)}var v='<div class="geTempDlgHeader"><img src="/images/draw.io-logo.svg" class="geTempDlgHeaderLogo"><input type="search" class="geTempDlgSearchBox" '+