Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Ca.substring(0,1).toUpperCase()+Ca.substring(1));18<Ca.length&&(Ca=Ca.substring(0,18)+"&hellip;");return Ca+(null!=ua?" ("+ua.length+")":"")}function la(Ca,ua,Ma){mxEvent.addListener(ua,"click",function(){Ka!=ua&&(null!=Ka&&(Ka.style.backgroundColor=""),Ka=ua,Ka.style.backgroundColor=z,ha.scrollTop=0,ha.innerText="",v=0,null!=sa[Ca].content?(ha.appendChild(sa[Ca].content),ca=ea,Ia=null,null!=sa[Ca].content.init&&sa[Ca].content.init()):(Ia=Ma?ta[Ca][Ma]:sa[Ca],T=null,t(!1)))});null!=urlParams["smart-template"]&&
"smartTemplate"==Ca&&ua.click()}Ta&&(Ta=!1,mxEvent.addListener(ha,"scroll",function(Ca){ha.scrollTop+ha.clientHeight>=ha.scrollHeight&&(t(),mxEvent.consume(Ca))}));if(0<Ea){var ma=document.createElement("div");ma.style.cssText="font-weight: bold;background: #f9f9f9;padding: 5px 0 5px 0;text-align: center;";mxUtils.write(ma,mxResources.get("custom"));xa.appendChild(ma);for(var oa in Da){var ia=document.createElement("div");ma=oa;var ja=Da[oa];18<ma.length&&(ma=ma.substring(0,18)+"&hellip;");ia.style.cssText=