Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(d,g){mxSettings.setUi(d);(g=this.doSetCurrentTheme(d)||g)||this.alert(mxResources.get("restartForChangeRequired"))};EditorUi.prototype.isDefaultTheme=function(d){return""==d||"dark"==d||"default"==d||"kennedy"==d||null==d};EditorUi.prototype.doSetCurrentTheme=function(d,g,n){function q(I){return"simple"==I||0==g&&"sketch"==I}g=null!=g?g:150;var t=Editor.currentTheme,v=q(t)&&this.isDefaultTheme(d)||this.isDefaultTheme(t)&&q(d),B=v&&"sketch"!=d&&"sketch"!=t;if(v&&!this.themeSwitching){Editor.currentTheme=