Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"message",C))}}catch(Y){null!=window.console&&console.warn(Y,C,L)}}function x(C,L){if(!P&&SimplePeer.WEBRTC_SUPPORT){var m=new SimplePeer({initiator:L,config:{iceServers:[{urls:"stun:54.89.235.160:3478"}]}});m.on("signal",function(z){y("sendSignal",{to:C,from:F,signal:z})});m.on("error",function(z){delete I[C];EditorUi.debug("P2PCollab: p2p socket error",z);!N&&L&&m.destroyed&&v[C]&&(EditorUi.debug("P2PCollab: p2p socket reconnecting",C),x(C,!0))});m.on("connect",function(){delete I[C];null==G[C]||
G[C].destroyed?(G[C]=m,v[C]=!0,EditorUi.debug("P2PCollab: p2p socket connected",C)):(m.noP2PMapDel=!0,m.destroy(),EditorUi.debug("P2PCollab: p2p socket duplicate",C))});m.on("close",function(){m.noP2PMapDel||(EditorUi.debug("P2PCollab: p2p socket closed",C),D(t[C]),delete G[C])});m.on("data",u);return I[C]=m}}function E(C,L){D(L||t[C]);null!=C&&(delete t[C],v[C]=!1)}function D(C){var L=g[C];if(null!=L){var m=L.selection,z;for(z in m)null!=m[z]&&m[z].destroy();null!=L.cursor&&null!=L.cursor.parentNode&&