Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
C,this.thumbImageCache)):C(m)});N?this.embedFonts(p,L):(this.editor.addFontCss(p),L(p))}catch(m){this.handleError(m)}};EditorUi.prototype.addRadiobox=function(d,g,n,q,t,v,B){return this.addCheckbox(d,n,q,t,v,B,!0,g)};EditorUi.prototype.addCheckbox=function(d,g,n,q,t,v,B,F){v=null!=v?v:!0;var I=document.createElement("input");I.style.marginRight="8px";I.style.marginTop="16px";I.setAttribute("type",B?"radio":"checkbox");B="geCheckbox-"+Editor.guid();I.id=B;null!=F&&I.setAttribute("name",F);n&&(I.setAttribute("checked",
"checked"),I.defaultChecked=!0);q&&I.setAttribute("disabled","disabled");v&&(d.appendChild(I),n=document.createElement("label"),mxUtils.write(n,g),n.setAttribute("for",B),d.appendChild(n),t||mxUtils.br(d));return I};EditorUi.prototype.addEditButton=function(d,g){var n=this.addCheckbox(d,mxResources.get("edit")+":",!0,null,!0);n.style.marginLeft="24px";var q=this.getCurrentFile(),t="";null!=q&&q.getMode()!=App.MODE_DEVICE&&q.getMode()!=App.MODE_BROWSER&&(t=window.location.href);var v=document.createElement("select");