Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,260,200);this.window.destroyOnClose=!1;this.window.setMaximizable(!1);this.window.setResizable(!0);this.window.setClosable(!0);this.window.setVisible(!0);this.window.addListener(mxEvent.SHOW,mxUtils.bind(this,function(){this.window.fit()}));b.installResizeHandler(this,!0)},ConfirmDialog=function(b,f,l,d,q,u,z,D,L,K,E){var R=document.createElement("div");R.style.textAlign="center";E=null!=E?E:44;var I=document.createElement("div");I.style.padding="6px";I.style.overflow="auto";I.style.maxHeight=E+
"px";I.style.lineHeight="1.2em";mxUtils.write(I,f);R.appendChild(I);null!=K&&(I=document.createElement("div"),I.style.padding="6px 0 6px 0",f=document.createElement("img"),f.setAttribute("src",K),I.appendChild(f),R.appendChild(I));K=document.createElement("div");K.style.textAlign="center";K.style.whiteSpace="nowrap";var c=document.createElement("input");c.setAttribute("type","checkbox");u=mxUtils.button(u||mxResources.get("cancel"),function(){b.hideDialog();null!=d&&d(c.checked)});u.className="geBtn";
null!=D&&(u.innerHTML=D+"<br>"+u.innerHTML,u.style.paddingBottom="8px",u.style.paddingTop="8px",u.style.height="auto",u.style.width="40%");b.editor.cancelFirst&&K.appendChild(u);var e=mxUtils.button(q||mxResources.get("ok"),function(){b.hideDialog();null!=l&&l(c.checked)});K.appendChild(e);null!=z?(e.innerHTML=z+"<br>"+e.innerHTML+"<br>",e.style.paddingBottom="8px",e.style.paddingTop="8px",e.style.height="auto",e.className="geBtn",e.style.width="40%"):e.className="geBtn gePrimaryBtn";b.editor.cancelFirst||
K.appendChild(u);R.appendChild(K);L?(K.style.marginTop="10px",I=document.createElement("p"),I.style.marginTop="20px",I.style.marginBottom="0px",I.appendChild(c),q=document.createElement("span"),mxUtils.write(q," "+mxResources.get("rememberThisSetting")),I.appendChild(q),R.appendChild(I),mxEvent.addListener(q,"click",function(k){c.checked=!c.checked;mxEvent.consume(k)})):K.style.marginTop="12px";this.init=function(){e.focus()};this.container=R},HeadlessEditorUi=function(){EditorUi.call(this,new Editor(!0),