Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Qa,Ia)}})}function Q(ja){u&&(Ba.scrollTop=0,ba.innerText="",Fa.spin(ba),l=!1,K=!0,sa.innerText=mxResources.get("recentDiag"),Y=null,u(Va,function(){n(mxResources.get("cannotLoad"));Va([])},ja?null:m))}function P(ja){if(""==ja)null!=J&&(J.click(),J=null);else{if(null==TemplatesDialog.tagsList[c]){var fa={};for(Ka in Ga)for(var ma=Ga[Ka],na=0;na<ma.length;na++){var oa=ma[na];if(null!=oa.tags)for(var ia=oa.tags.toLowerCase().split(";"),ka=0;ka<ia.length;ka++)null==fa[ia[ka]]&&(fa[ia[ka]]=[]),fa[ia[ka]].push(oa)}TemplatesDialog.tagsList[c]=
fa}var xa=ja.toLowerCase().split(" ");fa=TemplatesDialog.tagsList[c];if(0<Ia&&null==fa.__tagsList__){for(Ka in Qa)for(ma=Qa[Ka],na=0;na<ma.length;na++)for(oa=ma[na],ia=oa.title.split(" "),ia.push(Ka),ka=0;ka<ia.length;ka++){var ua=ia[ka].toLowerCase();null==fa[ua]&&(fa[ua]=[]);fa[ua].push(oa)}fa.__tagsList__=!0}var Ka=[];ma={};for(na=ia=0;na<xa.length;na++)if(0<xa[na].length){ua=fa[xa[na]];var Ja={};Ka=[];if(null!=ua)for(ka=0;ka<ua.length;ka++)oa=ua[ka],0==ia==(null==ma[oa.url])&&(Ja[oa.url]=!0,Ka.push(oa));
ma=Ja;ia++}0==Ka.length?sa.innerText=mxResources.get("noResultsFor",[ja]):F(Ka,!0)}}function M(ja){if(Y!=ja||V!=aa)q(),Ba.scrollTop=0,ba.innerText="",sa.innerText=mxResources.get("searchResults")+' "'+ja+'"',Ua=null,ca?P(ja):v&&(ja?(Fa.spin(ba),l=!1,K=!0,v(ja,Va,function(){n(mxResources.get("searchFailed"));Va([])},V?null:m)):Q(V)),Y=ja,aa=V}function p(ja){null!=Ua&&clearTimeout(Ua);13==ja.keyCode?M(Ca.value):Ua=setTimeout(function(){M(Ca.value)},1E3)}var y='<div class="geTempDlgHeader"><img src="/images/draw.io-logo.svg" class="geTempDlgHeaderLogo"><input type="search" class="geTempDlgSearchBox" '+