Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
};EditorUi.prototype.getBasenames=function(){var d={};if(null!=this.pages)for(var f=0;f<this.pages.length;f++)this.updatePageRoot(this.pages[f]),this.addBasenamesForCell(this.pages[f].root,d);else this.addBasenamesForCell(this.editor.graph.model.getRoot(),d);f=[];for(var k in d)f.push(k);return f};EditorUi.prototype.addBasenamesForCell=function(d,f){function k(F){if(null!=F){var K=F.lastIndexOf(".");0<K&&(F=F.substring(K+1,F.length));null==f[F]&&(f[F]=!0)}}var u=this.editor.graph,z=u.getCellStyle(d);
k(mxStencilRegistry.getBasenameForStencil(z[mxConstants.STYLE_SHAPE]));u.model.isEdge(d)&&(k(mxMarker.getPackageForType(z[mxConstants.STYLE_STARTARROW])),k(mxMarker.getPackageForType(z[mxConstants.STYLE_ENDARROW])));z=u.model.getChildCount(d);for(var C=0;C<z;C++)this.addBasenamesForCell(u.model.getChildAt(d,C),f)};EditorUi.prototype.setGraphEnabled=function(d){this.diagramContainer.style.visibility=d?"":"hidden";this.formatContainer.style.visibility=d?"":"hidden";this.sidebarContainer.style.display=