Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Math.round(25*Math.random()))):/\s/.test(t)?n.push(" "):n.push("?"):n.push(g?"0":Math.round(9*Math.random()))}return n.join("")};EditorUi.prototype.anonymizePatch=function(d){if(null!=d[EditorUi.DIFF_INSERT])for(var g=0;g<d[EditorUi.DIFF_INSERT].length;g++)try{var n=mxUtils.parseXml(d[EditorUi.DIFF_INSERT][g].data).documentElement.cloneNode(!1);null!=n.getAttribute("name")&&n.setAttribute("name",this.anonymizeString(n.getAttribute("name")));d[EditorUi.DIFF_INSERT][g].data=mxUtils.getXml(n)}catch(v){d[EditorUi.DIFF_INSERT][g].data=
v.message}if(null!=d[EditorUi.DIFF_UPDATE]){for(var q in d[EditorUi.DIFF_UPDATE]){var t=d[EditorUi.DIFF_UPDATE][q];null!=t.name&&(t.name=this.anonymizeString(t.name));null!=t.cells&&(g=mxUtils.bind(this,function(v){var B=t.cells[v];if(null!=B){for(var F in B)null!=B[F].value&&(B[F].value="["+B[F].value.length+"]"),null!=B[F].xmlValue&&(B[F].xmlValue="["+B[F].xmlValue.length+"]"),null!=B[F].style&&(B[F].style="["+B[F].style.length+"]"),mxUtils.isEmptyObject(B[F])&&delete B[F];mxUtils.isEmptyObject(B)&&
delete t.cells[v]}}),g(EditorUi.DIFF_INSERT),g(EditorUi.DIFF_UPDATE),mxUtils.isEmptyObject(t.cells)&&delete t.cells);mxUtils.isEmptyObject(t)&&delete d[EditorUi.DIFF_UPDATE][q]}mxUtils.isEmptyObject(d[EditorUi.DIFF_UPDATE])&&delete d[EditorUi.DIFF_UPDATE]}return d};EditorUi.prototype.anonymizeAttributes=function(d,g){if(null!=d.attributes)for(var n=0;n<d.attributes.length;n++)"as"!=d.attributes[n].name&&d.setAttribute(d.attributes[n].name,this.anonymizeString(d.attributes[n].value,g));if(null!=d.childNodes)for(n=