Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.currentState=this.currentTarget=null;null!=this.highlight&&this.highlight.hide();null!=oa.tooltipHandler&&oa.tooltipHandler.hide()}};oa.click=function(sa){};oa.addMouseListener(wa);mxEvent.addListener(document,"mouseleave",function(sa){wa.clear()})};Graph.prototype.duplicateCells=function(x,J){x=null!=x?x:this.getSelectionCells();J=null!=J?J:!0;for(var Q=0;Q<x.length;Q++)this.isTableCell(x[Q])&&(x[Q]=this.model.getParent(x[Q]));x=this.model.getTopmostCells(x);var Y=this.getModel(),ea=this.gridSize,