Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,260,200);this.window.destroyOnClose=!1;this.window.setMaximizable(!1);this.window.setResizable(!0);this.window.setClosable(!0);this.window.setVisible(!0);this.window.addListener(mxEvent.SHOW,mxUtils.bind(this,function(){this.window.fit()}));b.installResizeHandler(this,!0)},ConfirmDialog=function(b,e,f,c,k,l,u,x,E,D,A){var K=document.createElement("div");K.style.textAlign="center";A=null!=A?A:44;var H=document.createElement("div");H.style.padding="6px";H.style.overflow="auto";H.style.maxHeight=A+
"px";H.style.lineHeight="1.2em";mxUtils.write(H,e);K.appendChild(H);null!=D&&(H=document.createElement("div"),H.style.padding="6px 0 6px 0",e=document.createElement("img"),e.setAttribute("src",D),H.appendChild(e),K.appendChild(H));D=document.createElement("div");D.style.textAlign="center";D.style.whiteSpace="nowrap";var d=document.createElement("input");d.setAttribute("type","checkbox");l=mxUtils.button(l||mxResources.get("cancel"),function(){b.hideDialog();null!=c&&c(d.checked)});l.className="geBtn";
null!=x&&(l.innerHTML=x+"<br>"+l.innerHTML,l.style.paddingBottom="8px",l.style.paddingTop="8px",l.style.height="auto",l.style.width="40%");b.editor.cancelFirst&&D.appendChild(l);var g=mxUtils.button(k||mxResources.get("ok"),function(){b.hideDialog();null!=f&&f(d.checked)});D.appendChild(g);null!=u?(g.innerHTML=u+"<br>"+g.innerHTML+"<br>",g.style.paddingBottom="8px",g.style.paddingTop="8px",g.style.height="auto",g.className="geBtn",g.style.width="40%"):g.className="geBtn gePrimaryBtn";b.editor.cancelFirst||
D.appendChild(l);K.appendChild(D);E?(D.style.marginTop="10px",H=document.createElement("p"),H.style.marginTop="20px",H.style.marginBottom="0px",H.appendChild(d),k=document.createElement("span"),mxUtils.write(k," "+mxResources.get("rememberThisSetting")),H.appendChild(k),K.appendChild(H),mxEvent.addListener(k,"click",function(n){d.checked=!d.checked;mxEvent.consume(n)})):D.style.marginTop="12px";this.init=function(){g.focus()};this.container=K},HeadlessEditorUi=function(){EditorUi.call(this,new Editor(!0),