Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(d){return""};EditorUi.prototype.libraryLoaded=function(d,f,k,u){if(null!=this.sidebar){d.constructor!=LocalLibrary&&mxSettings.addCustomLibrary(d.getHash());var z=null;if(d.constructor!=StorageLibrary||".scratchpad"!=d.title){null==this.openLibraries&&(this.openLibraries=[]);for(var C=0;C<this.openLibraries.length;C++)if(this.openLibraries[C].file.getHash()==d.getHash()){mxUtils.remove(this.openLibraries[C],this.openLibraries);break}z={file:d,images:f,title:k,expand:u};this.openLibraries.push(z)}else this.scratchpad=