Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.ui.showDialog(B.container,300,80,!0,!1);B.init()}))),mxUtils.br(x));for(var v=0;v<t.length;v++)mxUtils.bind(this,function(B){x.appendChild(E(B.name,mxUtils.bind(this,function(){b?(f=B.id,A()):(this.ui.hideDialog(),e(B.id))})))})(t[v]);100==t.length&&(x.appendChild(K),H=function(){x.scrollTop>=x.scrollHeight-x.offsetHeight&&n()},mxEvent.addListener(x,"scroll",H))}}),mxUtils.bind(this,function(t){401==t.status?this.authenticate(q,D,!0):null!=D&&D({message:t.responseText})}))});q()});d()};