Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
[c,n,v]);3<=c.state.strokeWidth&&(n=mxUtils.getValue(this.style,"fillColor",null),null!=n&&(c.setStrokeColor(n),c.setStrokeWidth(c.state.strokeWidth-2),c.setDashed(t,B),Za.prototype.origPaintEdgeShape.apply(this,[c,m,v])))};mxCellRenderer.registerShape("filledEdge",Za);"undefined"!==typeof StyleFormatPanel&&function(){var c=StyleFormatPanel.prototype.getCustomColors;StyleFormatPanel.prototype.getCustomColors=function(){var m=this.editorUi.getSelectionState(),v=c.apply(this,arguments);"umlFrame"==
m.style.shape&&v.push({title:mxResources.get("laneColor"),key:"swimlaneFillColor",defaultValue:"default"});return v}}();mxMarker.addMarker("dash",function(c,m,v,n,t,B,D,ha,I,va){var na=t*(D+I+1),bb=B*(D+I+1);return function(){c.begin();c.moveTo(n.x-na/2-bb/2,n.y-bb/2+na/2);c.lineTo(n.x+bb/2-3*na/2,n.y-3*bb/2-na/2);c.stroke()}});mxMarker.addMarker("box",function(c,m,v,n,t,B,D,ha,I,va){var na=t*(D+I+1),bb=B*(D+I+1),qb=n.x+na/2,fb=n.y+bb/2;n.x-=na;n.y-=bb;return function(){c.begin();c.moveTo(qb-na/2-