Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.replaceElement=function(x,J){J=x.ownerDocument.createElement(null!=J?J:"span");for(var Q=Array.prototype.slice.call(x.attributes);attr=Q.pop();)J.setAttribute(attr.nodeName,attr.nodeValue);J.innerHTML=x.innerHTML;x.parentNode.replaceChild(J,x)};Graph.prototype.processElements=function(x,J){if(null!=x){x=x.getElementsByTagName("*");for(var Q=0;Q<x.length;Q++)J(x[Q])}};Graph.prototype.updateLabelElements=function(x,J,Q){x=null!=x?x:this.getSelectionCells();for(var Y=document.createElement("div"),
ea=0;ea<x.length;ea++){var la=this.getCurrentCellStyle(x[ea]);if(null!=la&&"1"==la.html&&(la=this.convertValueToString(x[ea]),null!=la&&0<la.length)){Y.innerHTML=la;for(var oa=Y.getElementsByTagName(null!=Q?Q:"*"),wa=0;wa<oa.length;wa++)J(oa[wa]);Y.innerHTML!=la&&this.cellLabelChanged(x[ea],Y.innerHTML)}}};Graph.prototype.cellLabelChanged=function(x,J,Q){J=Graph.zapGremlins(J);this.model.beginUpdate();try{if(null!=x.value&&"object"==typeof x.value){if(this.isReplacePlaceholders(x)&&null!=x.getAttribute("placeholder"))for(var Y=