Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
g.view.validate());N=L;P=C}));var R=g.labelLinkClicked;g.labelLinkClicked=function(C,L,m){var z=L.getAttribute("href");if(null==z||!g.isCustomLink(z)||!mxEvent.isTouchEvent(m)&&mxEvent.isPopupTrigger(m))R.apply(this,arguments);else{if(!g.isEnabled()||null!=C&&g.isCellLocked(C.cell))g.customLinkClicked(z),g.getRubberband().reset();mxEvent.consume(m)}};this.editor.getOrCreateFilename=function(){var C=d.defaultFilename,L=d.getCurrentFile();null!=L&&(C=null!=L.getTitle()?L.getTitle():C);return C};var M=