Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
d,I,u,z),K&&!E?I.y=k.y:E&&!K&&(I.x=k.x),k.y!=I.y&&null!=this.guideY&&null!=this.guideY.node&&(this.guideY.node.style.visibility="hidden"),k.x!=I.x&&null!=this.guideX&&null!=this.guideX.node&&(this.guideX.node.style.visibility="hidden"),I;V(!0,!0);return b.apply(this,arguments)};var f=mxGuide.prototype.setVisible;mxGuide.prototype.setVisible=function(d){f.call(this,d);var q=this.guidesArrVer,u=this.guidesArrHor;if(null!=q)for(var z=0;z<q.length;z++)q[z].node.style.visibility=d?"visible":"hidden";if(null!=
u)for(z=0;z<u.length;z++)u[z].node.style.visibility=d?"visible":"hidden"};var l=mxGuide.prototype.destroy;mxGuide.prototype.destroy=function(){l.call(this);var d=this.guidesArrVer,q=this.guidesArrHor;if(null!=d){for(var u=0;u<d.length;u++)d[u].destroy();this.guidesArrVer=null}if(null!=q){for(u=0;u<q.length;u++)q[u].destroy();this.guidesArrHor=null}}})();function mxRuler(b,f,l,d){function q(){var y=b.diagramContainer;R.style.top=y.offsetTop-L+"px";R.style.left=y.offsetLeft-L+"px";R.style.width=(l?0:y.offsetWidth)+L+"px";R.style.height=(l?y.offsetHeight:0)+L+"px"}function u(y,A,G){if(null!=z)return y;var C;return function(){var V=this,S=arguments,N=G&&!C;clearTimeout(C);C=setTimeout(function(){C=null;G||y.apply(V,S)},A);N&&y.apply(V,S)}}var z=window.requestAnimationFrame||window.mozRequestAnimationFrame||window.webkitRequestAnimationFrame||window.msRequestAnimationFrame,