Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxResources.get("ok"),la,ka,function(va){var wa=null!=va&&0<va.length;return wa&&e?(la(va),!1):wa},null,null,null,ia,c?null:[]),b.showDialog(ka.container,350,80,!0,!0),ka.init())}}function G(ka){na.innerText=mxResources.get(fa||ka?"create":"copy");ka=ka?"none":"";R&&(Aa.style.display=ka);for(var da=B.querySelectorAll(".geTempDlgLinkToDiagram"),la=0;la<da.length;la++)da[la].style.display=ka}function C(ka,da,la,ma,oa){oa||(aa.innerText="",y(),X=ka,Z=ma);var ia=null;if(la){ia=document.createElement("table");