Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
T)/G);return new mxRectangle(this.scale*(this.translate.x+M*R),this.scale*(this.translate.y+W*G),this.scale*(Math.ceil(Math.max(1,L+E.width/this.scale)/R)-M)*R,this.scale*(Math.ceil(Math.max(1,T+E.height/this.scale)/G)-W)*G)};var p=mxGraph.prototype.panGraph;mxGraph.prototype.panGraph=function(E,L){p.apply(this,arguments);this.dialect==mxConstants.DIALECT_SVG||null==this.view.backgroundPageShape||this.useScrollbarsForPanning&&mxUtils.hasScrollbars(this.container)||(this.view.backgroundPageShape.node.style.marginLeft=
E+"px",this.view.backgroundPageShape.node.style.marginTop=L+"px")};var y=mxPopupMenu.prototype.addItem;mxPopupMenu.prototype.addItem=function(E,L,T,G,M,R){var W=y.apply(this,arguments);null==R||R||mxEvent.addListener(W,"mousedown",function(d){mxEvent.consume(d)});return W};var q=mxGraphHandler.prototype.isPropagateSelectionCell;mxGraphHandler.prototype.isPropagateSelectionCell=function(E,L,T){var G=this.graph.model.getParent(E);if(L){var M=this.graph.model.isEdge(E)?null:this.graph.getCellGeometry(E);