Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
libs:ka.getAttribute("libs"),clibs:ka.getAttribute("clibs"),title:ka.getAttribute("title")}),ka=ka.nextSibling;S(Ha)}});var Va=function(ka,fa,ma){za.style.display="";Fa.stop();L=!1;if(m)m=!1;else if(fa)ba.innerText=fa;else{ma=ma||{};fa=0;for(var na in ma)fa+=ma[na].length;0==ka.length&&0==fa?ba.innerText=mxResources.get("noDiagrams"):G(ka,!1,Q,0==fa?null:ma)}};P(V);var Ua=null;mxEvent.addListener(Ca,"keyup",p);mxEvent.addListener(Ca,"search",p);mxEvent.addListener(Ca,"input",p);mxEvent.addListener(la,
"click",function(ka){F(!1,!1)});K&&mxEvent.addListener(ya,"click",function(ka){F(!1,!0)});H&&mxEvent.addListener(C.querySelector(".geTempDlgLinkToDiagramBtn"),"click",function(ka){F(!0)});mxEvent.addListener(C.querySelector(".geTempDlgCancelBtn"),"click",function(){null!=f&&f();g||b.hideDialog(!0)})};TemplatesDialog.tagsList={};