Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
n)/c.view.scale-v})},wb=function(c,m,v,n,t){return hb(c,m,function(B){var D=c.absolutePoints;if(null!=D&&0<D.length){var ha=D.length-1;B=c.view.translate;var I=c.view.scale,va=v?D[0]:D[ha];D=v?D[1]:D[ha-1];ha=D.x-va.x;var na=D.y-va.y,bb=Math.sqrt(ha*ha+na*na);va=n.call(this,bb,ha/bb,na/bb,va,D);return new mxPoint(va.x/I-B.x,va.y/I-B.y)}return null},function(B,D,ha){var I=c.absolutePoints,va=I.length-1;B=c.view.translate;var na=c.view.scale,bb=v?I[0]:I[va];I=v?I[1]:I[va-1];va=I.x-bb.x;var qb=I.y-bb.y,
fb=Math.sqrt(va*va+qb*qb);D.x=(D.x+B.x)*na;D.y=(D.y+B.y)*na;t.call(this,fb,va/fb,qb/fb,bb,I,D,ha)})},xb=function(c,m){return function(v){return[wb(v,["startWidth"],!0,function(n,t,B,D,ha){ha=mxUtils.getNumber(v.style,"startWidth",c)*v.view.scale+m;return new mxPoint(D.x+t*n/4+B*ha/2,D.y+B*n/4-t*ha/2)},function(n,t,B,D,ha,I){n=Math.sqrt(mxUtils.ptSegDistSq(D.x,D.y,ha.x,ha.y,I.x,I.y));v.style.startWidth=Math.round(2*n)/v.view.scale-m})]}},rb=function(c){return function(m){return[hb(m,["arrowWidth",