Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
EditorUi.prototype.diffCell=function(b,e){function f(u){return null!=u&&"object"===typeof u&&"number"===typeof u.nodeType&&"string"===typeof u.nodeName&&"function"===typeof u.getAttribute}var c={};b.vertex!=e.vertex&&(c.vertex=e.vertex?1:0);b.edge!=e.edge&&(c.edge=e.edge?1:0);b.connectable!=e.connectable&&(c.connectable=e.connectable?1:0);if((null!=b.parent?null==e.parent:null!=e.parent)||null!=b.parent&&null!=e.parent&&b.parent.getId()!=e.parent.getId())c.parent=null!=e.parent?e.parent.getId():"";
if((null!=b.source?null==e.source:null!=e.source)||null!=b.source&&null!=e.source&&b.source.getId()!=e.source.getId())c.source=null!=e.source?e.source.getId():"";if((null!=b.target?null==e.target:null!=e.target)||null!=b.target&&null!=e.target&&b.target.getId()!=e.target.getId())c.target=null!=e.target?e.target.getId():"";f(b.value)&&f(e.value)?b.value.isEqualNode(e.value)||(c.xmlValue=mxUtils.getXml(e.value)):b.value!=e.value&&(f(e.value)?c.xmlValue=mxUtils.getXml(e.value):c.value=null!=e.value?
e.value:null);b.style!=e.style&&(c.style=e.style);b.visible!=e.visible&&(c.visible=e.visible?1:0);b.collapsed!=e.collapsed&&(c.collapsed=e.collapsed?1:0);if(!this.isObjectEqual(b.geometry,e.geometry,new mxGeometry)){var k=this.codec.encode(e.geometry);null!=k&&(c.geometry=mxUtils.getXml(k))}for(var l in b)this.cellProperties[l]||"function"===typeof b[l]||"function"===typeof e[l]||b[l]==e[l]||(c[l]=void 0===e[l]?null:e[l]);for(l in e)l in b||this.cellProperties[l]||"function"===typeof b[l]||"function"===
typeof e[l]||b[l]==e[l]||(c[l]=void 0===e[l]?null:e[l]);return c};EditorUi.prototype.resolveCrossReferences=function(b,e){var f={};mxUtils.isEmptyObject(e)||(this.adoptTheirPages(b,e,f),this.adoptTheirCells(b,e,f));EditorUi.debug("EditorUi.resolveCrossReferences",[this],"ownDiff",b,"theirDiff",e,"resolve",f);return f};