Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
typeof mxMermaidToDrawio)ea=ca=ua;ua=g.cloneNode(!0);ma.appendChild(ua);Ma=function(Pa){M=null!=b.sidebar.tooltip&&"none"!=b.sidebar.tooltip.style.display};Oa=function(Pa){M||y(Ra,mxEvent.getClientX(Pa),mxEvent.getClientY(Pa),Qa,Ca)};mxEvent.addGestureListeners(Qa,Ma,null,Oa);mxEvent.addGestureListeners(ua,Ma,null,Oa)},function(ua){b.handleError(ua)})});Ja.setAttribute("disabled","disabled");Ja.className="geBtn gePrimaryBtn";oa=function(){window.setTimeout(function(){""!=la.value?Ja.removeAttribute("disabled"):