Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"click",wa):(mxEvent.addListener(ua,"click",function(Na){C(ua,null,null,da,va)}),mxEvent.addListener(ua,"dblclick",function(Na){G();mxEvent.consume(Na)}));null!=da&&(ia=g.cloneNode(!0),ua.appendChild(ia),mxEvent.addGestureListeners(ia,mxUtils.bind(this,function(Na){M=b.sidebar.currentElt==ua}),null,null),mxEvent.addListener(ia,"click",mxUtils.bind(this,function(Na){M||Ca(Na,null!=ma?ma:oa);mxEvent.consume(Na)})));ha.appendChild(ua);return ua}function S(){function da(Ca,ua){Ca=mxResources.get(Ca,null,
Ca.substring(0,1).toUpperCase()+Ca.substring(1));18<Ca.length&&(Ca=Ca.substring(0,18)+"&hellip;");return Ca+(null!=ua?" ("+ua.length+")":"")}function la(Ca,ua,Ma){mxEvent.addListener(ua,"click",function(){Ka!=ua&&(null!=Ka&&(Ka.style.backgroundColor=""),Ka=ua,Ka.style.backgroundColor=z,ha.scrollTop=0,ha.innerText="",v=0,null!=sa[Ca].content?(ha.appendChild(sa[Ca].content),ca=ea,Ia=null,null!=sa[Ca].content.init&&sa[Ca].content.init()):(Ia=Ma?ta[Ca][Ma]:sa[Ca],T=null,t(!1)))});null!=urlParams["smart-template"]&&