Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
W.apply(this,arguments);if(Editor.enableCustomProperties){for(var A={},O=l.vertices,X=l.edges,U=0;U<O.length;U++)this.findCommonProperties(O[U],A,0==U);for(U=0;U<X.length;U++)this.findCommonProperties(X[U],A,0==O.length&&0==U);null!=Object.getOwnPropertyNames&&0<Object.getOwnPropertyNames(A).length&&this.container.appendChild(this.addProperties(this.createPanel(),A,l))}};var d=StyleFormatPanel.prototype.addStyleOps;StyleFormatPanel.prototype.addStyleOps=function(l){var A=this.editorUi.getSelectionState();
1==A.cells.length?this.addActions(l,["copyStyle","pasteStyle"]):1<=A.cells.length&&this.addActions(l,["pasteStyle","pasteData"]);return d.apply(this,arguments)};EditorUi.prototype.propertiesCollapsed=!0;StyleFormatPanel.prototype.addProperties=function(l,A,O){function X(Ea,Ka,x,J){xa.getModel().beginUpdate();try{var Q=[],Y=[];if(null!=x.index){for(var fa=[],la=x.parentRow.nextSibling;la&&la.getAttribute("data-pName")==Ea;)fa.push(la.getAttribute("data-pValue")),la=la.nextSibling;x.index<fa.length?