Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m,mxUtils.bind(this,function(v){null==v||".scratchpad"==m&&v==this.emptyLibraryXml?A.contentWindow.postMessage(JSON.stringify({action:"remoteInvoke",funtionName:"getLocalStorageFile",functionArgs:[m]}),"*"):O()}),O)}}catch(v){console.log(v)}}),J=mxUtils.bind(this,function(m){try{this.setDatabaseItem(null,[{title:m.title,size:m.data.length,lastModified:Date.now(),type:m.isLib?"L":"F"},{title:m.title,data:m.data}],O,O,["filesInfo","files"])}catch(v){console.log(v)}});y=mxUtils.bind(this,function(m){try{if(m.source==