Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
P=this.cloneCell(ba[0]);this.addEdge(P,f.getDefaultParent(),U,N[Z])}}finally{this.model.endUpdate()}return N};if(null!=d.sidebar){var K=d.sidebar.dropAndConnect;d.sidebar.dropAndConnect=function(aa,S,da,P){var V=f.model,l=null;V.beginUpdate();try{if(l=K.apply(this,arguments),p(aa))for(var A=0;A<l.length;A++)if(V.isEdge(l[A])&&null==V.getTerminal(l[A],!0)){V.setTerminal(l[A],aa,!0);var N=f.getCellGeometry(l[A]);N.points=null;null!=N.getTerminalPoint(!0)&&N.setTerminalPoint(null,!0)}}finally{V.endUpdate()}return l}}var O=