Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
typeof e[l]||b[l]==e[l]||(c[l]=void 0===e[l]?null:e[l]);return c};EditorUi.prototype.resolveCrossReferences=function(b,e){var f={};mxUtils.isEmptyObject(e)||(this.adoptTheirPages(b,e,f),this.adoptTheirCells(b,e,f));EditorUi.debug("EditorUi.resolveCrossReferences",[this],"ownDiff",b,"theirDiff",e,"resolve",f);return f};