Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
G[C].destroyed?(G[C]=m,v[C]=!0,EditorUi.debug("P2PCollab: p2p socket connected",C)):(m.noP2PMapDel=!0,m.destroy(),EditorUi.debug("P2PCollab: p2p socket duplicate",C))});m.on("close",function(){m.noP2PMapDel||(EditorUi.debug("P2PCollab: p2p socket closed",C),D(t[C]),delete G[C])});m.on("data",u);return I[C]=m}}function E(C,L){D(L||t[C]);null!=C&&(delete t[C],v[C]=!1)}function D(C){var L=g[C];if(null!=L){var m=L.selection,z;for(z in m)null!=m[z]&&m[z].destroy();null!=L.cursor&&null!=L.cursor.parentNode&&
L.cursor.parentNode.removeChild(L.cursor);clearTimeout(L.inactiveTO);delete g[C]}}var A=b.editor.graph,K=0,H=null,d="#e6194b #3cb44b #4363d8 #f58231 #911eb4 #f032e6 #469990 #9A6324 #800000 #808000 #000075 #a9a9a9 #ffe119 #42d4f4 #bfef45 #fabed4 #dcbeff #fffac8 #aaffc3 #ffd8b1".split(" "),g={},n=1,q={},t={},v={},B={},F,I={},G={},S=!0,U=!1,N=!1,P="0"!=urlParams["no-p2p"],R=!1,M=0,p=null,y=mxUtils.bind(this,function(C,L){if(!N)try{null!=H?(H.send(JSON.stringify({action:C,msg:L})),P||EditorUi.debug("P2PCollab: sending to socket server",