Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"cells",[R])),b.fireEvent(new mxEventObject("freehandInserted","cell",R))}finally{b.model.endUpdate()}q&&b.setSelectionCells([R])}}for(R=0;R<k.length;R++)k[R].parentNode.removeChild(k[R]);c=null;k=[];u=[]}B(!1)};b.addListener(mxEvent.FIRE_MOUSE_EVENT,mxUtils.bind(this,function(P,R){P=R.getProperty("eventName");R=R.getProperty("event");P==mxEvent.MOUSE_MOVE&&g&&(null!=R.sourceState&&R.sourceState.setCursor("crosshair"),R.consume())}));b.addMouseListener({mouseDown:mxUtils.bind(this,function(P,R){if(b.isEnabled()&&