Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
(function(){var b=new mxObjectCodec(new ChangePage,["ui","relatedPage","index","page","previousPage"]);b.afterEncode=function(e,g,p){p.setAttribute("relatedPage",g.relatedPage.getId());null==g.index&&(p.setAttribute("name",g.relatedPage.getName()),null!=g.relatedPage.viewState&&p.setAttribute("viewState",JSON.stringify(g.relatedPage.viewState,function(y,q){return 0>mxUtils.indexOf(EditorUi.transientViewStateProperties,y)?q:void 0})),null!=g.relatedPage.root&&e.encodeCell(g.relatedPage.root,p));return p};