Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
e)}null!=b.graphModelNode&&(b.viewState=this.editor.graph.createViewState(b.graphModelNode))}return b};EditorUi.prototype.selectPage=function(b,e,g){try{if(b!=this.currentPage){var p=this.editor.graph;p.isEditing()&&p.stopEditing(!1);e=null!=e?e:!1;p.isMouseDown=!1;p.reset();var y=p.model.createUndoableEdit();y.ignoreEdit=!0;var q=new SelectPage(this,b,g);q.execute();y.add(q);y.notify();e||p.model.fireEvent(new mxEventObject(mxEvent.UNDO,"edit",y))}}catch(E){this.handleError(E)}};