Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxConstants.GUIDE_STROKEWIDTH);v.dialect=mxConstants.DIALECT_SVG;v.pointerEvents=!1;v.init(R.graph.getView().getOverlayPane());return v};V=function(v,B){if(v&&null!=R.guidesArrHor)for(v=0;v<R.guidesArrHor.length;v++)R.guidesArrHor[v].node.style.visibility="hidden";if(B&&null!=R.guidesArrVer)for(v=0;v<R.guidesArrVer.length;v++)R.guidesArrVer[v].node.style.visibility="hidden"};if(1<C&&C==n.length-1){C=[];N=R.guidesArrHor;K=[];L=0;p=n[0]==I?1:0;Q=n[p].y+n[p].height;if(0<S)for(p=0;p<n.length-1;p++)c=