Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Editor.extractGraphModelFromXref(T));null!=F&&(F=decodeURIComponent(F.replace(/\\\(/g,"(").replace(/\\\)/g,")")));return F};Editor.extractGraphModelFromXref=function(g){var x=g.trailer,F=null;null!=x&&(x=/.* \/Info (\d+) (\d+) R/g.exec(x.join("\n")),null!=x&&0<x.length&&(x=g[x[1]],null!=x&&(x=/.* \/Subject (\d+) (\d+) R/g.exec(x.join("\n")),null!=x&&0<x.length&&(g=g[x[1]],null!=g&&(g=g.join("\n"),F=g.substring(1,g.length-1))))));return F};Editor.extractParserError=function(g,x){var F=null;g=null!=
g?g.getElementsByTagName("parsererror"):null;null!=g&&0<g.length&&(F=x||mxResources.get("invalidChars"),x=g[0].getElementsByTagName("div"),0<x.length&&(F=mxUtils.getTextContent(x[0])));return null!=F?mxUtils.trim(F):F};Editor.addRetryToError=function(g,x){null!=g&&(g=null!=g.error?g.error:g,null==g.retry&&(g.retry=x))};Editor.mermaidToDrawio=function(g,x,F){if("function"===typeof mxMermaidToDrawio)return mxMermaidToDrawio(g,x,F)};Editor.configure=function(g){if(null!=g){Editor.config=g;Editor.configVersion=