Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxCellEditor.prototype.isTextSelected=function(){var x="";window.getSelection?x=window.getSelection():document.getSelection?x=document.getSelection():document.selection&&(x=document.selection.createRange().text);return""!=x};mxCellEditor.prototype.insertTab=function(x){var J=this.textarea.ownerDocument.defaultView.getSelection(),Q=J.getRangeAt(0);x=Graph.createTabNode(x);Q.insertNode(x);Q.setStartAfter(x);Q.setEndAfter(x);J.removeAllRanges();J.addRange(Q)};mxCellEditor.prototype.alignText=function(x,
J){var Q=null!=J&&mxEvent.isShiftDown(J);if(Q||null!=window.getSelection&&null!=window.getSelection().containsNode){var Y=!0;this.graph.processElements(this.textarea,function(ea){Q||window.getSelection().containsNode(ea,!0)?(ea.removeAttribute("align"),ea.style.textAlign=null):Y=!1});Y&&this.graph.cellEditor.setAlign(x)}document.execCommand("justify"+x.toLowerCase(),!1,null)};mxCellEditor.prototype.saveSelection=function(){if(window.getSelection){var x=window.getSelection();if(x.getRangeAt&&x.rangeCount){for(var J=