Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
R.height=p.copiedSize.height,q.getModel().setGeometry(G[M],R))}}finally{q.getModel().endUpdate()}}},null,null,"Alt+Shift+V");this.addAction("copyData",function(){var G=q.getSelectionCell()||q.getModel().getRoot();q.isEnabled()&&null!=G&&(G=G.cloneValue(),null==G||isNaN(G.nodeType)||(p.copiedValue=G))},null,null,"Alt+Shift+B");this.addAction("pasteData",function(G,M){function R(f,k){var u=W.getValue(f);k=f.cloneValue(k);k.removeAttribute("placeholders");null==u||isNaN(u.nodeType)||k.setAttribute("placeholders",
u.getAttribute("placeholders"));null!=G&&mxEvent.isShiftDown(G)||k.setAttribute("label",q.convertValueToString(f));W.setValue(f,k)}G=null!=M?M:G;var W=q.getModel();if(q.isEnabled()&&!q.isSelectionEmpty()&&null!=p.copiedValue){W.beginUpdate();try{var d=q.getEditableCells(q.getSelectionCells());if(0==d.length)R(W.getRoot(),p.copiedValue);else for(M=0;M<d.length;M++)R(d[M],p.copiedValue)}finally{W.endUpdate()}}},null,null,"Alt+Shift+E");this.addAction("delete",function(G,M){G=null!=M?M:G;null!=G&&mxEvent.isShiftDown(G)?