Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
v),(g==mxLanguage||""==g&&null==mxLanguage)&&m.addCheckmark(F,Editor.checkmarkImage));return F});B("");m.addSeparator(v);for(var H in mxLanguageMap)B(H)})));var c=Menus.prototype.createMenubar;Menus.prototype.createMenubar=function(m){var v=c.apply(this,arguments);if(("1"!=urlParams.embed||"1"==urlParams.atlas)&&null!=v&&Editor.enableSimpleTheme&&"atlassian"!=d.getServiceName()){var B=this.get("appearance");if(null!=B){var H=v.addMenu("",B.funct);H.setAttribute("title",mxResources.get("appearance"));
H.className="geToolbarButton geAdaptiveAsset";H.style.backgroundPosition="center center";H.style.backgroundRepeat="no-repeat";H.style.backgroundSize="100% 100%";H.style.display="inline-block";H.style.cursor="pointer";H.style.zIndex="1";H.style.position="absolute";H.style.height="18px";H.style.width="18px";"atlas"==Editor.currentTheme?(H.style.filter="invert(100%)",H.style.right="11px",H.style.top="10px"):(H.style.right="10px",H.style.top="5px");document.body.appendChild(H);v.langIcon=H;B=mxUtils.bind(this,
function(){var g=window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth;H.style.display="atlas"==Editor.currentTheme||"min"==Editor.currentTheme||"sketch"==Editor.currentTheme?"none":"";H.style.backgroundImage="simple"==Editor.currentTheme?750>g?"url("+Editor.thinDoubleArrowRightImage+")":"url("+(Editor.isDarkMode()?Editor.thinDarkImage:Editor.thinLightImage)+")":"url("+(Editor.isDarkMode()?Editor.darkModeImage:Editor.lightModeImage)+")"});this.editorUi.addListener("currentThemeChanged",
B);this.editorUi.addListener("darkModeChanged",B);mxEvent.addListener(window,"resize",B);B()}}return v}}d.customLayoutConfig=[{layout:"mxHierarchicalLayout",config:{orientation:"west",intraCellSpacing:30,interRankCellSpacing:100,interHierarchySpacing:60,parallelEdgeSpacing:10}}];d.actions.addAction("runLayout",function(){d.showCustomLayoutDialog(JSON.stringify(d.customLayoutConfig,null,2))});E=this.get("viewZoom");var e=E.funct;E.funct=mxUtils.bind(this,function(m,v){e.apply(this,arguments);"sketch"!=