Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
libs:ka.getAttribute("libs"),clibs:ka.getAttribute("clibs"),title:ka.getAttribute("title")}),ka=ka.nextSibling;V(Ka)}});var Va=function(ka,da,la){za.style.display="";Ga.stop();H=!1;if(g)g=!1;else if(da)aa.innerText=da;else{la=la||{};da=0;for(var ma in la)da+=la[ma].length;0==ka.length&&0==da?aa.innerText=mxResources.get("noDiagrams"):C(ka,!1,U,0==da?null:la)}};O(W);var Ua=null;mxEvent.addListener(Fa,"keyup",m);mxEvent.addListener(Fa,"search",m);mxEvent.addListener(Fa,"input",m);mxEvent.addListener(na,
"click",function(ka){A(!1,!1)});R&&mxEvent.addListener(Aa,"click",function(ka){A(!1,!0)});I&&mxEvent.addListener(B.querySelector(".geTempDlgLinkToDiagramBtn"),"click",function(ka){A(!0)});mxEvent.addListener(B.querySelector(".geTempDlgCancelBtn"),"click",function(){null!=l&&l();e||b.hideDialog(!0)})};TemplatesDialog.tagsList={};