Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
window.console&&console.error(J,C,L)}}function k(C){if(b.shareCursorPosition&&!A.isMouseDown){var L=mxUtils.getOffset(A.container),m=A.view.translate,z=A.view.scale,J=null!=b.currentPage?b.currentPage.getId():null;c("cursor",{pageId:J,x:Math.round((C.getX()-L.x+A.container.scrollLeft)/z-m.x),y:Math.round((C.getY()-L.y+A.container.scrollTop)/z-m.y)})}}function l(C,L){var m=null!=b.currentPage?b.currentPage.getId():null;if(null!=C&&null!=C.cursor&&null!=C.lastCursor)if(null!=C.lastCursor.hide||!b.isShowRemoteCursors()||
null!=C.lastCursor.pageId&&C.lastCursor.pageId!=m)C.cursor.style.display="none";else{m=function(){var V=Math.max(A.container.scrollLeft,Math.min(A.container.scrollLeft+A.container.clientWidth-C.cursor.clientWidth,O)),Q=Math.max(A.container.scrollTop-22,Math.min(A.container.scrollTop+A.container.clientHeight-C.cursor.clientHeight,T));W.style.opacity=V!=O||Q!=T?0:1;C.cursor.style.left=V+"px";C.cursor.style.top=Q+"px";C.cursor.style.display=""};var z=A.view.translate,J=A.view.scale,O=(z.x+C.lastCursor.x)*
J+8,T=(z.y+C.lastCursor.y)*J-12,W=C.cursor.getElementsByTagName("img")[0];L?(mxUtils.setPrefixedStyle(C.cursor.style,"transition","all 900ms ease-out"),mxUtils.setPrefixedStyle(W.style,"transition","all 900ms ease-out"),window.setTimeout(m,0)):(mxUtils.setPrefixedStyle(C.cursor.style,"transition",null),mxUtils.setPrefixedStyle(W.style,"transition",null),m())}}function u(C,L){try{var m=function(){if(null==g[J]){var Y=B[J];null==Y&&(Y=K%d.length,B[J]=Y,K++);var aa=d[Y];Y=11<Y?"black":"white";g[J]={cursor:document.createElement("div"),