Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=C.lastCursor.pageId&&C.lastCursor.pageId!=m)C.cursor.style.display="none";else{m=function(){var V=Math.max(A.container.scrollLeft,Math.min(A.container.scrollLeft+A.container.clientWidth-C.cursor.clientWidth,O)),Q=Math.max(A.container.scrollTop-22,Math.min(A.container.scrollTop+A.container.clientHeight-C.cursor.clientHeight,T));W.style.opacity=V!=O||Q!=T?0:1;C.cursor.style.left=V+"px";C.cursor.style.top=Q+"px";C.cursor.style.display=""};var z=A.view.translate,J=A.view.scale,O=(z.x+C.lastCursor.x)*