Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"mermaidData",JSON.stringify({data:F,config:x.config},null,2))}finally{e.getModel().endUpdate()}},function(M){c.handleError(M)})},null,null,400,220);c.showDialog(H.container,420,300,!0,!0);H.init()};var k=e.cellEditor.startEditing;e.cellEditor.startEditing=function(B,H){try{var g=this.graph.getAttributeForCell(B,"plantUmlData");if(null!=g)this.editPlantUmlData(B,H,g);else if(g=this.graph.getAttributeForCell(B,"mermaidData"),null!=g)this.editMermaidData(B,H,g);else{var x=e.getCellStyle(B);"1"==mxUtils.getValue(x,
"metaEdit","0")?c.showDataDialog(B):k.apply(this,arguments)}}catch(F){c.handleError(F)}};e.getLinkTitle=function(B){return c.getLinkTitle(B)};e.customLinkClicked=function(B){var H=!1;try{c.handleCustomLink(B),H=!0}catch(g){c.handleError(g)}return H};var n=e.parseBackgroundImage;e.parseBackgroundImage=function(B){var H=n.apply(this,arguments);null!=H&&null!=H.src&&Graph.isPageLink(H.src)&&(H={originalSrc:H.src});return H};var p=e.setBackgroundImage;e.setBackgroundImage=function(B){null!=B&&null!=B.originalSrc&&