Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
161==d.charCodeAt(4)&&177==d.charCodeAt(5)&&26==d.charCodeAt(6)&&225==d.charCodeAt(7)||60==d.charCodeAt(0)&&63==d.charCodeAt(1)&&120==d.charCodeAt(2)&&109==d.charCodeAt(3)&&108==d.charCodeAt(3))};var b=EditorUi.prototype.createKeyHandler;EditorUi.prototype.createKeyHandler=function(d){var f=b.apply(this,arguments);if(!this.editor.chromeless||this.editor.editable){var k=f.getFunction,u=this.editor.graph,z=this;f.getFunction=function(B){if(u.isSelectionEmpty()&&null!=z.pages&&0<z.pages.length){var F=
z.getSelectedPageIndex();if(mxEvent.isShiftDown(B)){if(37==B.keyCode)return function(){0<F&&z.movePage(F,F-1)};if(38==B.keyCode)return function(){0<F&&z.movePage(F,0)};if(39==B.keyCode)return function(){F<z.pages.length-1&&z.movePage(F,F+1)};if(40==B.keyCode)return function(){F<z.pages.length-1&&z.movePage(F,z.pages.length-1)}}else if(mxEvent.isControlDown(B)||mxClient.IS_MAC&&mxEvent.isMetaDown(B)){if(37==B.keyCode)return function(){0<F&&z.selectNextPage(!1)};if(38==B.keyCode)return function(){0<
F&&z.selectPage(z.pages[0])};if(39==B.keyCode)return function(){F<z.pages.length-1&&z.selectNextPage(!0)};if(40==B.keyCode)return function(){F<z.pages.length-1&&z.selectPage(z.pages[z.pages.length-1])}}}return!(65<=B.keyCode&&90>=B.keyCode)||u.isSelectionEmpty()||mxEvent.isAltDown(B)||mxEvent.isShiftDown(B)||mxEvent.isControlDown(B)||mxClient.IS_MAC&&mxEvent.isMetaDown(B)?k.apply(this,arguments):null}}return f};var e=EditorUi.prototype.extractGraphModelFromHtml;EditorUi.prototype.extractGraphModelFromHtml=