Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.menubarContainer)),null!=this.buttonContainer&&(this.buttonContainer.style.display="",this.buttonContainer.style.padding="",this.menubar.container.appendChild(this.buttonContainer))};EditorUi.prototype.createMenu=function(d,f,k,u){k=null!=k?k:"geToolbarButton";var z=this.menus.get(d);u=this.menubar.addMenu(mxResources.get(d),z.funct,null,u);u.className=k;u.style.display="inline-block";u.style.cursor="pointer";u.style.height="24px";u.setAttribute("title",mxResources.get(d));this.menus.menuCreated(z,
u,k);null!=f&&(u.style.backgroundImage="url("+f+")",u.style.backgroundPosition="center center",u.style.backgroundRepeat="no-repeat",u.style.backgroundSize="100% 100%",u.style.width="24px",u.innerText="");return u};EditorUi.prototype.createToolbarButton=function(d,f,k,u){u=null!=u?u:24;var z=document.createElement("a");z.className="geToolbarButton geAdaptiveAsset";z.setAttribute("title",f);z.style.backgroundImage="url("+d+")";z.style.backgroundPosition="center center";z.style.backgroundRepeat="no-repeat";