Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"10px";A.style.resize="none";A.style.height="150px";A.style.width="440px";A.style.border="1px solid gray";A.value=mxResources.get("updatingDocument");c.appendChild(A);mxUtils.br(c);this.init=function(){window.setTimeout(function(){5E5>e.length?(A.value=e,A.focus(),mxClient.IS_GC||mxClient.IS_FF||5<=document.documentMode?A.select():document.execCommand("selectAll",!1,null)):(A.setAttribute("readonly","true"),A.value=mxResources.get("tooLargeUseDownload"))},0)};l=document.createElement("div");l.style.position=