Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null==H.getTerminal(g[x],!0)){H.setTerminal(g[x],J,!0);var F=e.getCellGeometry(g[x]);F.points=null;null!=F.getTerminalPoint(!0)&&F.setTerminalPoint(null,!0)}}finally{H.endUpdate()}return g}}var G={67:c.actions.get("selectChildren"),88:c.actions.get("selectDescendants"),80:c.actions.get("selectParent"),83:c.actions.get("selectSiblings")},C=c.onKeyDown;c.onKeyDown=function(J){try{var m=e.getSelectionCell();if(e.isEnabled()&&!e.isEditing()&&null!=m){var v=mxEvent.isAltDown(J)&&mxEvent.isShiftDown(J)?