Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Da.substring(0,1).toUpperCase()+Da.substring(1));18<Da.length&&(Da=Da.substring(0,18)+"&hellip;");return Da+(null!=va?" ("+va.length+")":"")}function ma(Da,va,Ma){mxEvent.addListener(va,"click",function(){Ha!=va&&(null!=Ha&&(Ha.style.backgroundColor=""),Ha=va,Ha.style.backgroundColor=u,ha.scrollTop=0,ha.innerText="",y=0,null!=ra[Da].content?(ha.appendChild(ra[Da].content),da=ea,Ia=null,null!=ra[Da].content.init&&ra[Da].content.init()):(Ia=Ma?ua[Da][Ma]:ra[Da],W=null,v(!1)))});null!=urlParams["smart-template"]&&
"smartTemplate"==Da&&va.click()}Qa&&(Qa=!1,mxEvent.addListener(ha,"scroll",function(Da){ha.scrollTop+ha.clientHeight>=ha.scrollHeight&&(v(),mxEvent.consume(Da))}));if(0<Ea){var na=document.createElement("div");na.style.cssText="font-weight: bold;background: #f9f9f9;padding: 5px 0 5px 0;text-align: center;";mxUtils.write(na,mxResources.get("custom"));ta.appendChild(na);for(var oa in Ga){var ia=document.createElement("div");na=oa;var ja=Ga[oa];18<na.length&&(na=na.substring(0,18)+"&hellip;");ia.style.cssText=