Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
D.appendChild(l);K.appendChild(D);E?(D.style.marginTop="10px",H=document.createElement("p"),H.style.marginTop="20px",H.style.marginBottom="0px",H.appendChild(d),k=document.createElement("span"),mxUtils.write(k," "+mxResources.get("rememberThisSetting")),H.appendChild(k),K.appendChild(H),mxEvent.addListener(k,"click",function(n){d.checked=!d.checked;mxEvent.consume(n)})):D.style.marginTop="12px";this.init=function(){g.focus()};this.container=K},HeadlessEditorUi=function(){EditorUi.call(this,new Editor(!0),
document.createElement("div"),!0)};mxUtils.extend(HeadlessEditorUi,EditorUi);HeadlessEditorUi.prototype.createUi=function(){};HeadlessEditorUi.prototype.addTrees=function(){};HeadlessEditorUi.prototype.onBeforeUnload=function(){};HeadlessEditorUi.prototype.updateActionStates=function(){};EditorUi.DIFF_INSERT="i";EditorUi.DIFF_REMOVE="r";EditorUi.DIFF_UPDATE="u";EditorUi.transientViewStateProperties="defaultParent currentRoot scrollLeft scrollTop scale translate lastPasteXml pasteCounter".split(" ");EditorUi.prototype.viewStateProperties={background:!0,backgroundImage:!0,shadowVisible:!0,foldingEnabled:!0,pageScale:!0,mathEnabled:!0,pageFormat:!0,extFonts:!0};