Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var ErrorDialog=function(b,e,g,p,y,q,E,L,T,G,M){T=null!=T?T:!0;var R=document.createElement("div");R.style.textAlign="center";if(null!=e){var W=document.createElement("div");W.style.padding="0px";W.style.margin="0px";W.style.fontSize="18px";W.style.paddingBottom="16px";W.style.marginBottom="10px";W.style.borderBottom="1px solid #c0c0c0";W.style.color="gray";W.style.whiteSpace="nowrap";W.style.textOverflow="ellipsis";W.style.overflow="hidden";mxUtils.write(W,e);W.setAttribute("title",e);R.appendChild(W)}e=
document.createElement("div");e.style.lineHeight="1.2em";e.style.padding="6px";"string"===typeof g&&(g=g.replace(/\n/g,"<br/>"));e.innerHTML=g;R.appendChild(e);g=document.createElement("div");g.style.marginTop="12px";g.style.textAlign="center";null!=q&&(e=mxUtils.button(mxResources.get("tryAgain"),function(){b.hideDialog();q()}),e.className="geBtn",g.appendChild(e),g.style.textAlign="center");null!=G&&(G=mxUtils.button(G,function(){null!=M&&M()}),G.className="geBtn",g.appendChild(G));var d=mxUtils.button(p,
function(){T&&b.hideDialog();null!=y&&y()});d.className="geBtn";g.appendChild(d);null!=E&&(p=mxUtils.button(E,function(){T&&b.hideDialog();null!=L&&L()}),p.className="geBtn gePrimaryBtn",g.appendChild(p));this.init=function(){d.focus()};R.appendChild(g);this.container=R},PrintDialog=function(b,e){this.create(b,e)};