Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0;T<W.length;T++)W[T].parentNode.removeChild(W[T]);R(g);g.style.opacity="0.5"}else{W=B(N).replies;for(T=0;T<W.length;T++)t.removeChild(W[T]);for(T=0;T<O.length;T++)if(O[T]==N){O.splice(T,1);break}y.style.display=0==t.getElementsByTagName("div").length?"block":"none"}},function(T){E(g);b.handleError(T,null,null,null,mxUtils.htmlEntities(mxResources.get("objectNotFound")))})})},N.isResolved));c||N.isLocked||0!=J||v(N.isResolved?mxResources.get("reopen"):mxResources.get("resolve"),function(T){function W(){var U=
T.target;U.innerText="";N.isResolved=!N.isResolved;mxUtils.write(U,N.isResolved?mxResources.get("reopen"):mxResources.get("resolve"));for(var X=N.isResolved?"none":"",Z=B(N).replies,Y=Editor.isDarkMode()?"transparent":N.isResolved?"ghostWhite":"white",ba=0;ba<Z.length;ba++){Z[ba].style.backgroundColor=Y;for(var fa=Z[ba].querySelectorAll(".geCommentAction"),ca=0;ca<fa.length;ca++)fa[ca]!=U.parentNode&&(fa[ca].style.display=X);C||(Z[ba].style.display="none")}z()}N.isResolved?H(mxResources.get("reOpened")+