Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0;W<V.length;W++)V[W].parentNode.removeChild(V[W]);K(m);m.style.opacity="0.5"}else{V=C(N).replies;for(W=0;W<V.length;W++)v.removeChild(V[W]);for(W=0;W<P.length;W++)if(P[W]==N){P.splice(W,1);break}B.style.display=0==v.getElementsByTagName("div").length?"block":"none"}},function(W){A(m);b.handleError(W,null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))})})},N.isResolved));d||N.isLocked||0!=M||y(N.isResolved?mxResources.get("reopen"):mxResources.get("resolve"),function(W){function V(){var Q=
W.target;Q.innerText="";N.isResolved=!N.isResolved;mxUtils.write(Q,N.isResolved?mxResources.get("reopen"):mxResources.get("resolve"));for(var X=N.isResolved?"none":"",Z=C(N).replies,Y=Editor.isDarkMode()?"transparent":N.isResolved?"ghostWhite":"white",aa=0;aa<Z.length;aa++){Z[aa].style.backgroundColor=Y;for(var ca=Z[aa].querySelectorAll(".geCommentAction"),da=0;da<ca.length;da++)ca[da]!=Q.parentNode&&(ca[da].style.display=X);G||(Z[aa].style.display="none")}u()}N.isResolved?L(mxResources.get("reOpened")+