Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var z=this.hoverIcons.isResetEvent;this.hoverIcons.isResetEvent=function(P,V){return p.isSpaceDown()||z.apply(this,arguments)};this.keydownHandler=mxUtils.bind(this,function(P){16==P.which?this.shiftDown=!0:32!=P.which||y.isEditing()?mxEvent.isConsumed(P)||27!=P.keyCode||this.hideDialog(null,!0):(this.spaceDown=!0,this.hoverIcons.reset(),y.container.style.cursor="move",y.isEditing()||mxEvent.getSource(P)!=y.container||mxEvent.consume(P))});mxEvent.addListener(document,"keydown",this.keydownHandler);