Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(l,A,O){if(null!=A){var X=function(aa){if(null!=aa)if(O)for(var ba=0;ba<aa.length;ba++)A[aa[ba].name]=aa[ba];else for(var ia in A){var qa=!1;for(ba=0;ba<aa.length;ba++)if(aa[ba].name==ia&&aa[ba].type==A[ia].type){qa=!0;break}qa||delete A[ia]}},U=this.editorUi.editor.graph.view.getState(l);null!=U&&null!=U.shape&&(U.shape.commonCustomPropAdded||(U.shape.commonCustomPropAdded=!0,U.shape.customProperties=U.shape.customProperties||[],U.cell.vertex?Array.prototype.push.apply(U.shape.customProperties,