Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null,"Templates"),function(){ta.style.display="";qa.style.display="";ha.style.left="160px";X(0);ha.scrollTop=0;ha.innerText="";y=0;W!=Ia&&(Ia=W,ra=V,Ea=Q,ta.innerText="",U(),W=null)});T.push(N);n.appendChild(N);var Z=function(fa){ta.style.display="none";qa.style.display="none";ha.style.left="30px";X(fa?-1:1);null==W&&(W=Ia);ha.scrollTop=0;ha.innerText="";C.spin(ha);var ma=function(na,oa,ia){y=0;C.stop();Ia=na;ia=ia||{};var ja=0,wa;for(wa in ia)ja+=ia[wa].length;if(oa)ha.innerText=oa;else if(0==na.length&&
0==ja)ha.innerText=mxResources.get("noDiagrams",null,"No Diagrams Found");else if(ha.innerText="",0<ja){ta.style.display="";ha.style.left="160px";ta.innerText="";Ea=0;ra={"draw.io":na};for(wa in ia)ra[wa]=ia[wa];U()}else v(!0)};fa?H(Y.value,ma):K(ma)};K&&(N=mxUtils.button(mxResources.get("Recent",null,"Recent"),function(){Z()}),n.appendChild(N),T.push(N));if(H){N=document.createElement("span");N.style.marginLeft="10px";N.innerText=mxResources.get("search")+":";n.appendChild(N);var Y=document.createElement("input");