Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
fb=Math.sqrt(va*va+qb*qb);D.x=(D.x+B.x)*na;D.y=(D.y+B.y)*na;t.call(this,fb,va/fb,qb/fb,bb,I,D,ha)})},xb=function(c,m){return function(v){return[wb(v,["startWidth"],!0,function(n,t,B,D,ha){ha=mxUtils.getNumber(v.style,"startWidth",c)*v.view.scale+m;return new mxPoint(D.x+t*n/4+B*ha/2,D.y+B*n/4-t*ha/2)},function(n,t,B,D,ha,I){n=Math.sqrt(mxUtils.ptSegDistSq(D.x,D.y,ha.x,ha.y,I.x,I.y));v.style.startWidth=Math.round(2*n)/v.view.scale-m})]}},rb=function(c){return function(m){return[hb(m,["arrowWidth",