Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxUtils.bind(this,fa.prototype.curveTo);this.originalArcTo=this.canvas.arcTo;this.canvas.arcTo=mxUtils.bind(this,fa.prototype.arcTo)}function ca(){mxRectangleShape.call(this)}function ja(){mxRectangleShape.call(this)}function ma(){mxActor.call(this)}function aa(){mxActor.call(this)}function S(){mxActor.call(this)}function da(){mxRectangleShape.call(this)}function P(){mxRectangleShape.call(this)}function V(){mxCylinder.call(this)}function l(){mxShape.call(this)}function A(){mxShape.call(this)}function N(){mxEllipse.call(this)}