Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
(Ia&&(fb=new mxPoint(fb.x+I*Ja,fb.y+va*Ja),t.push(fb)),fb=new mxPoint(fb.x+na*Ga,fb.y+bb*Ga)):(Ia&&(fb=new mxPoint(fb.x+na*Ga,fb.y+bb*Ga),t.push(fb)),fb=new mxPoint(fb.x+I*Ja,fb.y+va*Ja));t.push(fb)};var fb=ha;null==n&&(n=new mxPoint(ha.x+(D.x-ha.x)/2,ha.y+(D.y-ha.y)/2));c(n.x,n.y,!0);c(D.x,D.y,!1)}};mxStyleRegistry.putValue("isometricEdgeStyle",mxEdgeStyle.IsometricConnector);var Cb=Graph.prototype.createEdgeHandler;Graph.prototype.createEdgeHandler=function(c,m){if(m==mxEdgeStyle.IsometricConnector){var v=
new mxElbowEdgeHandler(c);v.snapToTerminals=!1;return v}return Cb.apply(this,arguments)};E.prototype.constraints=[];L.prototype.getConstraints=function(c,m,v){c=[];var n=Math.tan(mxUtils.toRadians(30)),t=(.5-n)/2;n=Math.min(m,v/(.5+n));m=(m-n)/2;v=(v-n)/2;c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m,v+.25*n));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m+.5*n,v+n*t));c.push(new mxConnectionConstraint(new mxPoint(0,0),!1,null,m+n,v+.25*n));c.push(new mxConnectionConstraint(new mxPoint(0,