Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
e.getCell(g),null!=d&&d!=H&&(H=null));null!=H&&(e.getChildAt(f,x)!=H&&e.add(f,H,x),this.patchCellRecursive(b,e,H,c,k),x++);return g});for(D=[null];0<D.length;)if(A=D.shift(),A=E(null!=A?A.child:null,null!=A?A.insert:!1),K=l[A],null!=K&&(delete l[A],D.push({child:e.getCell(K)})),K=u[A],null!=K&&(delete u[A],D.push({child:this.getCellForJson(K),insert:!0})),0==D.length){for(A in l)D.push({child:e.getCell(l[A])}),delete l[A];for(A in u)D.push({child:this.getCellForJson(u[A]),insert:!0}),delete u[A]}}};