Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.model.getChildCount(J),Y=0;Y<Q;Y++)this.updateCustomLinksForCell(x,this.model.getChildAt(J,Y))};Graph.prototype.doUpdateCustomLinksForCell=function(x,J){};Graph.prototype.getAllConnectionConstraints=function(x,J){if(null!=x){J=mxUtils.getValue(x.style,"points",null);if(null!=J){x=[];try{var Q=JSON.parse(J);for(J=0;J<Q.length;J++){var Y=Q[J];x.push(new mxConnectionConstraint(new mxPoint(Y[0],Y[1]),2<Y.length?"0"!=Y[2]:!0,null,3<Y.length?Y[3]:0,4<Y.length?Y[4]:0))}}catch(la){}return x}if(null!=
x.shape&&null!=x.shape.bounds){Y=x.shape.direction;J=x.shape.bounds;var ea=x.shape.scale;Q=J.width/ea;J=J.height/ea;if(Y==mxConstants.DIRECTION_NORTH||Y==mxConstants.DIRECTION_SOUTH)Y=Q,Q=J,J=Y;J=x.shape.getConstraints(x.style,Q,J);if(null!=J)return J;if(null!=x.shape.stencil&&null!=x.shape.stencil.constraints)return x.shape.stencil.constraints;if(null!=x.shape.constraints)return x.shape.constraints}}return null};Graph.prototype.flipEdge=function(x){if(null!=x){var J=this.getCurrentCellStyle(x);J=