Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
f,k,u,z,C,F){return this.addCheckbox(d,k,u,z,C,F,!0,f)};EditorUi.prototype.addCheckbox=function(d,f,k,u,z,C,F,K){C=null!=C?C:!0;var O=document.createElement("input");O.style.marginRight="8px";O.style.marginTop="16px";O.setAttribute("type",F?"radio":"checkbox");F="geCheckbox-"+Editor.guid();O.id=F;null!=K&&O.setAttribute("name",K);k&&(O.setAttribute("checked","checked"),O.defaultChecked=!0);u&&O.setAttribute("disabled","disabled");C&&(d.appendChild(O),k=document.createElement("label"),mxUtils.write(k,
f),k.setAttribute("for",F),d.appendChild(k),z||mxUtils.br(d));return O};EditorUi.prototype.addEditButton=function(d,f){var k=this.addCheckbox(d,mxResources.get("edit")+":",!0,null,!0);k.style.marginLeft="24px";var u=this.getCurrentFile(),z="";null!=u&&u.getMode()!=App.MODE_DEVICE&&u.getMode()!=App.MODE_BROWSER&&(z=window.location.href);var C=document.createElement("select");C.style.maxWidth="200px";C.style.width="auto";C.style.marginLeft="8px";C.style.marginRight="10px";C.className="geBtn";u=document.createElement("option");