Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Ma[Qa]);0<=Oa&&ia.splice(Oa,1)}}}}}var ta=l.isEdge(ba);U=ta?N:A;var Da=l.getStyle(ba);for(pa=0;pa<ia.length;pa++){Aa=ia[pa];var Ba=U[Aa];null!=Ba&&"edgeStyle"!=Aa&&("shape"!=Aa||ta)&&(!ta||X||0>mxUtils.indexOf(T,Aa))&&(Da=mxUtils.setStyle(Da,Aa,Ba))}Editor.simpleLabels&&(Da=mxUtils.setStyle(mxUtils.setStyle(Da,"html",null),"whiteSpace",null));l.setStyle(ba,Da)}}finally{l.endUpdate()}return P};y.addListener("cellsInserted",function(P,V){f(V.getProperty("cells"),null,null,null,null,!0,!0)});y.addListener("textInserted",