Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"6px"):mxClient.IS_FF&&(y.style.paddingTop="0px",y.style.marginTop="-2px");if(null!=k)for(R=0;R<k.length;R++)mxUtils.br(y),mxUtils.write(y,k[R]);if(null!=e&&null==b[e]){A.style.visibility="hidden";mxUtils.setOpacity(y,10);var G=new Spinner({lines:12,length:12,width:5,radius:10,rotate:0,color:Editor.isDarkMode()?"#c0c0c0":"#000",speed:1.5,trail:60,shadow:!1,hwaccel:!1,top:"40%",zIndex:2E9});G.spin(t);var C=window.setTimeout(function(){null==b[e]&&(G.stop(),t.style.display="none")},3E4);b.addListener("clientLoaded",
mxUtils.bind(this,function(V,S){null!=b[e]&&S.getProperty("client")==b[e]&&(window.clearTimeout(C),mxUtils.setOpacity(y,100),A.style.visibility="",G.stop(),p(),"drive"==e&&null!=K.parentNode&&K.parentNode.removeChild(K))}))}else p();L.appendChild(t)}l=null!=l?l:2;var q=document.createElement("div");q.style.textAlign="center";q.style.whiteSpace="nowrap";q.style.paddingTop="0px";q.style.paddingBottom="20px";var u=document.createElement("div");u.style.border="1px solid #d3d3d3";u.style.borderWidth="1px 0px 1px 0px";