Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
c,t.pasteCounter=0);var C=t.pasteCounter*t.gridSize;if(k||this.isCompatibleString(c))y=this.importXml(c,C,C),t.setSelectionCells(y);else if(e&&1==t.getSelectionCount()){p=t.getStartEditingCell(t.getSelectionCell(),n);if(/\.(gif|jpg|jpeg|tiff|png|svg)$/i.test(c)&&"image"==t.getCurrentCellStyle(p)[mxConstants.STYLE_SHAPE])t.setCellStyles(mxConstants.STYLE_IMAGE,c,[p]);else{t.model.beginUpdate();try{t.labelChanged(p,c),Graph.isLink(c)&&t.setLinkForCell(p,c)}finally{t.model.endUpdate()}}t.setSelectionCell(p)}else y=
t.getInsertPoint(),t.isMouseInsertPoint()&&(C=0,t.lastPasteXml==c&&0<t.pasteCounter&&t.pasteCounter--),y=this.insertTextAt(c,y.x+C,y.y+C,p),t.setSelectionCells(y);t.isSelectionEmpty()||(t.scrollCellToVisible(t.getSelectionCell()),null!=this.hoverIcons&&this.hoverIcons.update(t.view.getState(t.getSelectionCell())));return y};EditorUi.prototype.pasteCells=function(c,e,k,n){if(!mxEvent.isConsumed(c)){var p=e,t=!1;if(k&&null!=c.clipboardData&&c.clipboardData.getData){var y=c.clipboardData.getData("text/plain"),