Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxResources.get("reconnecting"))?window.location.search=this.getSearch(["url"]):null!=n?this.fileLoaded(n)||t():t()});e?c():this.handleError(A,mxResources.get("errorLoadingFile"),c,!0,null,null,!0)}else t();return p};EditorUi.prototype.getHashValueForPages=function(c,e){var k=0,n=new mxGraphModel,p=new mxCodec;null!=e&&(e.byteCount=0,e.attrCount=0,e.eltCount=0,e.nodeCount=0);for(var t=0;t<c.length;t++){this.updatePageRoot(c[t]);var y=c[t].node.cloneNode(!1);y.removeAttribute("name");n.root=c[t].root;
var A=p.encode(n);this.editor.graph.saveViewState(c[t].viewState,A,!0);A.removeAttribute("pageWidth");A.removeAttribute("pageHeight");y.appendChild(A);null!=e&&(e.eltCount+=y.getElementsByTagName("*").length,e.nodeCount+=y.getElementsByTagName("mxCell").length);k=(k<<5)-k+this.hashValue(y,function(G,C,V,S){return!S||"mxGeometry"!=G.nodeName&&"mxPoint"!=G.nodeName||"x"!=C&&"y"!=C&&"width"!=C&&"height"!=C?S&&"mxCell"==G.nodeName&&"previous"==C?null:V:Math.round(V)},e)<<0}return k};EditorUi.prototype.hashValue=