Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
p);var X=mxUtils.bind(this,function(Z,Y,aa){Q.innerText="";mxUtils.write(Q,Math.round(100*v.editor.graph.view.scale*(null!=aa?aa:1))+"%")});v.editor.graph.view.addListener(mxEvent.EVENT_SCALE,X);v.editor.addListener("resetGraphView",X);v.editor.addListener("pageSelected",X);v.editor.graph.addListener("zoomPreview",mxUtils.bind(this,function(Z,Y){X(Z,Y,Y.getProperty("factor"))}))})(W);var V=v.setGraphEnabled;v.setGraphEnabled=function(){V.apply(this,arguments);null!=this.tabContainer&&(W.style.visibility=
this.tabContainer.style.visibility,this.diagramContainer.style.bottom="0"!=urlParams.pages&&"hidden"!=this.tabContainer.style.visibility?this.tabContainerHeight+"px":"0px")}}t.appendChild(F);t.appendChild(v.diagramContainer);q.appendChild(t);v.updateTabContainer();!EditorUi.windowed&&1E3<=c&&b(this,!0);t.appendChild(v.tabContainer);n();mxEvent.addListener(window,"resize",function(){n();null!=v.sidebarWindow&&v.sidebarWindow.window.fit();null!=v.formatWindow&&v.formatWindow.window.fit();null!=v.actions.outlineWindow&&