Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"#000000")),xa=mxUtils.setStyle(xa,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(qa,mxConstants.STYLE_GRADIENTCOLOR,null)),M.getModel().isVertex(Aa[Fa])&&(xa=mxUtils.setStyle(xa,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(qa,mxConstants.STYLE_FONTCOLOR,null))));M.getModel().setStyle(Aa[Fa],xa)}}finally{M.getModel().endUpdate()}}));ea.className="geStyleButton";ea.style.width="36px";ea.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ea.style.margin="0px 6px 6px 0px";if(null!=Ba){var ha=
Editor.isDarkMode()?"2px solid":"1px solid";null!=Ba.border&&(ha=Ba.border);null!=Ba.gradient?mxClient.IS_IE&&10>document.documentMode?ea.style.filter="progid:DXImageTransform.Microsoft.Gradient(StartColorStr='"+Ba.fill+"', EndColorStr='"+Ba.gradient+"', GradientType=0)":ea.style.backgroundImage="linear-gradient("+Ba.fill+" 0px,"+Ba.gradient+" 100%)":Ba.fill==mxConstants.NONE?ea.style.background="url('"+Dialog.prototype.noColorImage+"')":ea.style.backgroundColor=""==Ba.fill?mxUtils.getValue(M.defaultVertexStyle,
mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff"):Ba.fill||mxUtils.getValue(M.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff");ea.style.border=Ba.stroke==mxConstants.NONE?ha+" transparent":""==Ba.stroke?ha+" "+mxUtils.getValue(M.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?"#ffffff":Editor.darkColor):ha+" "+(Ba.stroke||mxUtils.getValue(M.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?
"#ffffff":Editor.darkColor));null!=Ba.title&&ea.setAttribute("title",Ba.title)}else{ha=mxUtils.getValue(M.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,"#ffffff");var pa=mxUtils.getValue(M.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,"#000000");ea.style.backgroundColor=ha;ea.style.border="1px solid "+pa}ea.style.borderRadius="0";P.appendChild(ea)});P.innerText="";for(var za=0;za<aa.length;za++)0<za&&0==mxUtils.mod(za,4)&&mxUtils.br(P),ra(aa[za])});null==this.format.currentScheme?Y(Math.min(U.length-