Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
f.setCellStyles(mxConstants.STYLE_ROTATION,Number(t.value),[e[B]])}}finally{f.getModel().endUpdate()}});v.className="geBtn gePrimaryBtn";mxEvent.addListener(k,"keypress",function(B){13==B.keyCode&&v.click()});l=document.createElement("div");l.style.marginTop="20px";l.style.textAlign="right";b.editor.cancelFirst?(l.appendChild(c),l.appendChild(v)):(l.appendChild(v),l.appendChild(c));k.appendChild(l);this.container=k},LibraryDialog=function(b,e,f,c,k,l){function u(S){for(S=document.elementFromPoint(S.clientX,
S.clientY);null!=S&&S.parentNode!=d;)S=S.parentNode;var U=null;if(null!=S){var N=d.firstChild;for(U=0;null!=N&&N!=S;)N=N.nextSibling,U++}return U}function x(S,U,N,P,R,M,p,y,C){try{if(b.spinner.stop(),null==U||"image/"==U.substring(0,6))if(null==S&&null!=p||null==n[S]){var L=function(){Q.innerText="";Q.style.cursor="pointer";Q.style.whiteSpace="nowrap";Q.style.textOverflow="ellipsis";mxUtils.write(Q,null!=X.title&&0<X.title.length?X.title:mxResources.get("untitled"));Q.style.color=null==X.title||0==