Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){var g=this.editorUi.getSelectionState();null!=this.defaultColorSchemes&&0<this.defaultColorSchemes.length&&"image"!=g.style.shape&&!g.containsLabel&&0<g.cells.length&&this.container.appendChild(this.addStyles(this.createPanel()));I.apply(this,arguments);if(Editor.enableCustomProperties){for(var x={},F=g.vertices,M=g.edges,P=0;P<F.length;P++)this.findCommonProperties(F[P],x,0==P);for(P=0;P<M.length;P++)this.findCommonProperties(M[P],x,0==F.length&&0==P);null!=Object.getOwnPropertyNames&&
0<Object.getOwnPropertyNames(x).length&&this.container.appendChild(this.addProperties(this.createPanel(),x,g))}};var c=StyleFormatPanel.prototype.addStyleOps;StyleFormatPanel.prototype.addStyleOps=function(g){var x=this.editorUi.getSelectionState();1==x.cells.length?this.addActions(g,["copyStyle","pasteStyle"]):1<=x.cells.length&&this.addActions(g,["pasteStyle","pasteData"]);return c.apply(this,arguments)};EditorUi.prototype.propertiesCollapsed=!0;StyleFormatPanel.prototype.addProperties=function(g,