Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
da.resp&&0<da.resp.length&&null!=da.resp[0]?aa(da.resp[0]):ja())}}catch(P){console.log(P)}});window.addEventListener("message",F)}})));d(C);C.onversionchange=function(){C.close()}}catch(F){null!=f?f(F):null!=window.console&&console.warn(F)}});u.onerror=f;u.onblocked=function(){}}catch(z){null!=f?f(z):null!=window.console&&console.error(z)}else null!=f&&f(Error("IndexedDB not supported"))}else d(this.database)};EditorUi.prototype.setDatabaseItem=function(d,f,k,u,z){this.openDatabase(mxUtils.bind(this,
function(C){try{z=z||"objects";Array.isArray(z)||(z=[z],d=[d],f=[f]);var F=C.transaction(z,"readwrite");F.oncomplete=k;F.onerror=u;for(C=0;C<z.length;C++)F.objectStore(z[C]).put(null!=d&&null!=d[C]?{key:d[C],data:f[C]}:f[C])}catch(K){null!=u&&u(K)}}),u)};EditorUi.prototype.removeDatabaseItem=function(d,f,k,u){this.openDatabase(mxUtils.bind(this,function(z){u=u||"objects";Array.isArray(u)||(u=[u],d=[d]);z=z.transaction(u,"readwrite");z.oncomplete=f;z.onerror=k;for(var C=0;C<u.length;C++)z.objectStore(u[C]).delete(d[C])}),