Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
EditorUi.prototype.showError=function(b,e,g,p,y,q,E,L,T,G,M,R,W){b=new ErrorDialog(this,b,e,g||mxResources.get("ok"),p,y,q,E,R,L,T);e=Math.ceil(null!=e?e.length/50:1);this.showDialog(b.container,G||340,M||100+20*e,!0,!1,W);b.init()};EditorUi.prototype.showDialog=function(b,e,g,p,y,q,E,L,T,G){this.editor.graph.tooltipHandler.resetTimer();this.editor.graph.tooltipHandler.hideTooltip();null==this.dialogs&&(this.dialogs=[]);this.dialog=new Dialog(this,b,e,g,p,y,q,E,L,T,G);this.dialogs.push(this.dialog)};