Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
N||X});0<l.length&&(da=da.concat(l),V=f.getIncomingTreeEdges(aa[P]),aa=aa.concat(V))}else null!=V&&da.push(aa[P])}aa=da;return z.apply(this,arguments)};d.hoverIcons.getStateAt=function(aa,S,da){return p(aa.cell)?null:this.graph.view.getState(this.graph.getCellAt(S,da))};var C=f.duplicateCells;f.duplicateCells=function(aa,S){aa=null!=aa?aa:this.getSelectionCells();for(var da=aa.slice(0),P=0;P<da.length;P++){var V=f.view.getState(da[P]);if(null!=V&&p(V.cell)){var l=f.getIncomingTreeEdges(V.cell);for(V=