Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
F.style.backgroundSize="24px";"simple"==d?F.style.flexShrink="0":F.style.marginBottom="4px";var H=!1,ka=mxUtils.bind(this,function(ja){if(ja||document.body.contains(k)){ja=function(da,P,V,l,A,N){null!=P&&da.setAttribute("title",P);da.style.cursor="pointer";da.style.margin="simple"==d?"0px":"8px 0px 8px 2px";da.style.display="simple"==d?"inline-block":"block";k.appendChild(da);"simple"==d?da.style.opacity="0.7":null!=l&&(P=A,P=null!=P?P:30,N=null!=N?N:26,da.style.position="relative",da.style.overflow=
"visible",V=document.createElement("div"),V.style.position="absolute",V.style.fontSize="8px",V.style.left=P+"px",V.style.top=N+"px",mxUtils.write(V,l),da.appendChild(V));return da};k.innerText="";if(!H){var ma=window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth;"simple"==d&&(this.sidebar.graph.cellRenderer.minSvgStrokeWidth=.9);var aa="simple"==d?"0px":"4px 0px 6px 2px";if("simple"!=d||660<=ma){var S=this.sidebar.createVertexTemplate("text;strokeColor=none;fillColor=none;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;",