Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
d.appendChild(d.resizeSensor);"static"==q(d,"position")&&(d.style.position="relative");var k=d.resizeSensor.childNodes[0],u=k.childNodes[0],z=d.resizeSensor.childNodes[1],C=function(){u.style.width="100000px";u.style.height="100000px";k.scrollLeft=1E5;k.scrollTop=1E5;z.scrollLeft=1E5;z.scrollTop=1E5};C();var F=!1,K=function(){d.resizedAttached&&(F&&(d.resizedAttached.call(),F=!1),b(K))};b(K);var O,H,ka,fa;f=function(){if((ka=d.offsetWidth)!=O||(fa=d.offsetHeight)!=H)F=!0,O=ka,H=fa;C()};var ca=function(ja,
ma,aa){ja.attachEvent?ja.attachEvent("on"+ma,aa):ja.addEventListener(ma,aa)};ca(k,"scroll",f);ca(z,"scroll",f)}var L=function(){GraphViewer.resizeSensorEnabled&&p()};if(GraphViewer.useResizeObserver&&"undefined"!==typeof ResizeObserver){var T=null,G=!1;(new ResizeObserver(function(){G||(null!=T&&window.clearTimeout(T),T=window.setTimeout(function(){G=!0;L();T=null;G=!1},200))})).observe(g)}else{var M=Object.prototype.toString.call(g),R="[object Array]"===M||"[object NodeList]"===M||"[object HTMLCollection]"===