Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
typeof mxMermaidToDrawio)ea=ca=ua;ua=g.cloneNode(!0);ma.appendChild(ua);Ma=function(Pa){M=null!=b.sidebar.tooltip&&"none"!=b.sidebar.tooltip.style.display};Oa=function(Pa){M||y(Ra,mxEvent.getClientX(Pa),mxEvent.getClientY(Pa),Qa,Ca)};mxEvent.addGestureListeners(Qa,Ma,null,Oa);mxEvent.addGestureListeners(ua,Ma,null,Oa)},function(ua){b.handleError(ua)})});Ja.setAttribute("disabled","disabled");Ja.className="geBtn gePrimaryBtn";oa=function(){window.setTimeout(function(){""!=la.value?Ja.removeAttribute("disabled"):
Ja.setAttribute("disabled","disabled")},0)};ja=urlParams["smart-template"];null!=ja&&"1"!=ja&&(la.value=decodeURIComponent(ja),oa(),"1"==urlParams["smart-template-generate"]&&window.setTimeout(function(){Ja.click()},0));mxEvent.addListener(la,"change",oa);mxEvent.addListener(la,"keydown",oa);mxEvent.addListener(la,"cut",oa);mxEvent.addListener(la,"paste",oa);mxEvent.addListener(la,"keydown",function(Ha){13==Ha.keyCode&&Ja.click()});oa=document.createElement("div");oa.style.height="40px";oa.style.marginTop=