Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null==b?(G.style.border="1px solid #c0c0c0",G.style.margin="40px",mxEvent.addListener(document.documentElement,"keydown",q)):(e.style.display="none",g.style.display="none");var M=this;T.getImageFromBundles=function(W){return M.getImageUrl(W)};var R=y.createTemporaryGraph;y.createTemporaryGraph=function(){var W=R.apply(this,arguments);W.getImageFromBundles=function(d){return M.getImageUrl(d)};return W};this.graphConfig.move&&(T.isMoveCellsEvent=function(W){return!0});mxUtils.setPrefixedStyle(G.style,