Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m);var X=mxUtils.bind(this,function(Z,Y,ba){U.innerText="";mxUtils.write(U,Math.round(100*t.editor.graph.view.scale*(null!=ba?ba:1))+"%")});t.editor.graph.view.addListener(mxEvent.EVENT_SCALE,X);t.editor.addListener("resetGraphView",X);t.editor.addListener("pageSelected",X);t.editor.graph.addListener("zoomPreview",mxUtils.bind(this,function(Z,Y){X(Z,Y,Y.getProperty("factor"))}))})(T);var W=t.setGraphEnabled;t.setGraphEnabled=function(){W.apply(this,arguments);null!=this.tabContainer&&(T.style.visibility=
this.tabContainer.style.visibility,this.diagramContainer.style.bottom="0"!=urlParams.pages&&"hidden"!=this.tabContainer.style.visibility?this.tabContainerHeight+"px":"0px")}}p.appendChild(A);p.appendChild(t.diagramContainer);n.appendChild(p);t.updateTabContainer();!EditorUi.windowed&&1E3<=d&&b(this,!0);p.appendChild(t.tabContainer);k();mxEvent.addListener(window,"resize",function(){k();null!=t.sidebarWindow&&t.sidebarWindow.window.fit();null!=t.formatWindow&&t.formatWindow.window.fit();null!=t.actions.outlineWindow&&