Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m.style.shape&&v.push({title:mxResources.get("laneColor"),key:"swimlaneFillColor",defaultValue:"default"});return v}}();mxMarker.addMarker("dash",function(c,m,v,n,t,B,D,ha,I,va){var na=t*(D+I+1),bb=B*(D+I+1);return function(){c.begin();c.moveTo(n.x-na/2-bb/2,n.y-bb/2+na/2);c.lineTo(n.x+bb/2-3*na/2,n.y-3*bb/2-na/2);c.stroke()}});mxMarker.addMarker("box",function(c,m,v,n,t,B,D,ha,I,va){var na=t*(D+I+1),bb=B*(D+I+1),qb=n.x+na/2,fb=n.y+bb/2;n.x-=na;n.y-=bb;return function(){c.begin();c.moveTo(qb-na/2-