Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
(null==Q.getCell()||Q.getCell()==I)};R.panningHandler.isForcePanningEvent=function(Q){return 2==Q.evt.button};var c=R.isCellSelectable;R.isCellSelectable=function(Q){return Q==I?!1:c.apply(this,arguments)};R.getLinkForCell=function(){return null};var e=R.view.getState(I);E=R.getAllConnectionConstraints(e);for(var k=0;null!=E&&k<E.length;k++){var n=R.getConnectionPoint(e,E[k]);u(n.x-3,n.y-3,E[k])}R.fit(8);R.center();k=b.createToolbarButton(Editor.zoomInImage,mxResources.get("zoomIn"),function(){R.zoomIn()},