Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
e.getCurrentCellStyle(J).treeMoving);return m}function u(J){var m=!1;null!=J&&(J=k.getParent(J),m=e.view.getState(J),m="tree"==(null!=m?m.style:e.getCellStyle(J)).containerType);return m}function z(J){var m=!1;null!=J&&(J=k.getParent(J),m=e.view.getState(J),e.view.getState(J),m=null!=(null!=m?m.style:e.getCellStyle(J)).childLayout);return m}function D(J){J=e.view.getState(J);if(null!=J){var m=e.getIncomingTreeEdges(J.cell);if(0<m.length&&(m=e.view.getState(m[0]),null!=m&&(m=m.absolutePoints,null!=
m&&0<m.length&&(m=m[m.length-1],null!=m)))){if(m.y==J.y&&Math.abs(m.x-J.getCenterX())<J.width/2)return mxConstants.DIRECTION_SOUTH;if(m.y==J.y+J.height&&Math.abs(m.x-J.getCenterX())<J.width/2)return mxConstants.DIRECTION_NORTH;if(m.x>J.getCenterX())return mxConstants.DIRECTION_WEST}}return mxConstants.DIRECTION_EAST}function L(J,m){m=null!=m?m:!0;e.model.beginUpdate();try{var v=e.model.getParent(J),B=e.getIncomingTreeEdges(J),H=e.cloneCells([B[0],J]);e.model.setTerminal(H[0],e.model.getTerminal(B[0],