Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Math.random()))):z.toUpperCase()!=z?k.push(String.fromCharCode(97+Math.round(25*Math.random()))):/\s/.test(z)?k.push(" "):k.push("?"):k.push(f?"0":Math.round(9*Math.random()))}return k.join("")};EditorUi.prototype.anonymizePatch=function(d){if(null!=d[EditorUi.DIFF_INSERT])for(var f=0;f<d[EditorUi.DIFF_INSERT].length;f++)try{var k=mxUtils.parseXml(d[EditorUi.DIFF_INSERT][f].data).documentElement.cloneNode(!1);null!=k.getAttribute("name")&&k.setAttribute("name",this.anonymizeString(k.getAttribute("name")));
d[EditorUi.DIFF_INSERT][f].data=mxUtils.getXml(k)}catch(B){d[EditorUi.DIFF_INSERT][f].data=B.message}if(null!=d[EditorUi.DIFF_UPDATE]){for(var u in d[EditorUi.DIFF_UPDATE]){var z=d[EditorUi.DIFF_UPDATE][u];null!=z.name&&(z.name=this.anonymizeString(z.name));null!=z.cells&&(f=mxUtils.bind(this,function(B){var F=z.cells[B];if(null!=F){for(var K in F)null!=F[K].value&&(F[K].value="["+F[K].value.length+"]"),null!=F[K].xmlValue&&(F[K].xmlValue="["+F[K].xmlValue.length+"]"),null!=F[K].style&&(F[K].style=
"["+F[K].style.length+"]"),mxUtils.isEmptyObject(F[K])&&delete F[K];mxUtils.isEmptyObject(F)&&delete z.cells[B]}}),f(EditorUi.DIFF_INSERT),f(EditorUi.DIFF_UPDATE),mxUtils.isEmptyObject(z.cells)&&delete z.cells);mxUtils.isEmptyObject(z)&&delete d[EditorUi.DIFF_UPDATE][u]}mxUtils.isEmptyObject(d[EditorUi.DIFF_UPDATE])&&delete d[EditorUi.DIFF_UPDATE]}return d};EditorUi.prototype.anonymizeAttributes=function(d,f){if(null!=d.attributes)for(var k=0;k<d.attributes.length;k++)"as"!=d.attributes[k].name&&