Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0==F%2,aa.flipBkg),x.parentNode.insertBefore(pa,x.nextSibling),x=pa;g.appendChild(ca);Ba();return g};StyleFormatPanel.prototype.addStyles=function(g){if(null!=this.defaultColorSchemes){var x=function(aa){mxEvent.addListener(aa,"mouseenter",function(){aa.style.opacity="1"});mxEvent.addListener(aa,"mouseleave",function(){aa.style.opacity="0.5"})},F=this.editorUi,M=F.editor.graph,P=document.createElement("div");P.style.whiteSpace="nowrap";P.style.paddingLeft="24px";P.style.paddingRight="20px";g.style.paddingLeft=