Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"base",ma.prototype.base)));return new mxPoint(v.x+Math.min(v.width,t*v.width+B),v.y+v.height-n)},function(v,n){var t=Math.max(0,Math.min(1,mxUtils.getValue(this.state.style,"position",ma.prototype.position)));this.state.style.base=Math.round(Math.max(0,Math.min(v.width,n.x-v.x-t*v.width)))},!1)];mxUtils.getValue(c.style,mxConstants.STYLE_ROUNDED,!1)&&m.push(pb(c));return m},internalStorage:function(c){var m=[hb(c,["dx","dy"],function(v){var n=Math.max(0,Math.min(v.width,mxUtils.getValue(this.state.style,
"dx",Da.prototype.dx))),t=Math.max(0,Math.min(v.height,mxUtils.getValue(this.state.style,"dy",Da.prototype.dy)));return new mxPoint(v.x+n,v.y+t)},function(v,n){this.state.style.dx=Math.round(Math.max(0,Math.min(v.width,n.x-v.x)));this.state.style.dy=Math.round(Math.max(0,Math.min(v.height,n.y-v.y)))},!1)];mxUtils.getValue(c.style,mxConstants.STYLE_ROUNDED,!1)&&m.push(pb(c));return m},module:function(c){return[hb(c,["jettyWidth","jettyHeight"],function(m){var v=Math.max(0,Math.min(m.width,mxUtils.getValue(this.state.style,