Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
u.getAttribute("placeholders"));null!=G&&mxEvent.isShiftDown(G)||k.setAttribute("label",q.convertValueToString(f));W.setValue(f,k)}G=null!=M?M:G;var W=q.getModel();if(q.isEnabled()&&!q.isSelectionEmpty()&&null!=p.copiedValue){W.beginUpdate();try{var d=q.getEditableCells(q.getSelectionCells());if(0==d.length)R(W.getRoot(),p.copiedValue);else for(M=0;M<d.length;M++)R(d[M],p.copiedValue)}finally{W.endUpdate()}}},null,null,"Alt+Shift+E");this.addAction("delete",function(G,M){G=null!=M?M:G;null!=G&&mxEvent.isShiftDown(G)?