Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
l.setCellStyles(mxConstants.STYLE_ROTATION,Number(p.value),[f[y]])}}finally{l.getModel().endUpdate()}});t.className="geBtn gePrimaryBtn";mxEvent.addListener(q,"keypress",function(y){13==y.keyCode&&t.click()});u=document.createElement("div");u.style.marginTop="20px";u.style.textAlign="right";b.editor.cancelFirst?(u.appendChild(d),u.appendChild(t)):(u.appendChild(t),u.appendChild(d));q.appendChild(u);this.container=q},LibraryDialog=function(b,f,l,d,q,u){function z(V){for(V=document.elementFromPoint(V.clientX,
V.clientY);null!=V&&V.parentNode!=c;)V=V.parentNode;var S=null;if(null!=V){var N=c.firstChild;for(S=0;null!=N&&N!=V;)N=N.nextSibling,S++}return S}function D(V,S,N,O,Q,J,m,v,B){try{if(b.spinner.stop(),null==S||"image/"==S.substring(0,6))if(null==V&&null!=m||null==k[V]){var H=function(){U.innerText="";U.style.cursor="pointer";U.style.whiteSpace="nowrap";U.style.textOverflow="ellipsis";mxUtils.write(U,null!=X.title&&0<X.title.length?X.title:mxResources.get("untitled"));U.style.color=null==X.title||0==