Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxResources.get("ok"),ma,ka,function(wa){var xa=null!=wa&&0<wa.length;return xa&&g?(ma(wa),!1):xa},null,null,null,ia,d?null:[]),b.showDialog(ka.container,350,80,!0,!0),ka.init())}}function I(ka){la.innerText=mxResources.get(ca||ka?"create":"copy");ka=ka?"none":"";K&&(ya.style.display=ka);for(var fa=C.querySelectorAll(".geTempDlgLinkToDiagram"),ma=0;ma<fa.length;ma++)fa[ma].style.display=ka}function G(ka,fa,ma,na,oa){oa||(ba.innerText="",B(),X=ka,Z=na);var ia=null;if(ma){ia=document.createElement("table");