Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"";Q.style.textOverflow="";Q.style.whiteSpace="";Q.style.cursor="text";Q.style.color="";Q.setAttribute("contentEditable","true");mxUtils.setPrefixedStyle(Q.style,"user-select","text");Q.focus();document.execCommand("selectAll",!1,null);v=function(){Q.removeAttribute("contentEditable");Q.style.cursor="pointer";X.title=Q.innerHTML;L()};mxEvent.consume(ca)}};mxEvent.addListener(Q,"click",W);mxEvent.addListener(O,"dblclick",W);d.appendChild(O);mxEvent.addListener(O,"dragstart",function(ca){null==S&&null!=