Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
!1,D=this.isHorizontal(),ha=this.getTitleSize();0==ha||this.outline?sa.prototype.paintVertexShape.apply(this,arguments):(mxSwimlane.prototype.paintVertexShape.apply(this,arguments),c.translate(-m,-v));B||this.outline||!(D&&ha<t||!D&&ha<n)||this.paintForeground(c,m,v,n,t)};e.prototype.paintForeground=function(c,m,v,n,t){if(null!=this.state){var B=this.flipH,D=this.flipV;if(this.direction==mxConstants.DIRECTION_NORTH||this.direction==mxConstants.DIRECTION_SOUTH){var ha=B;B=D;D=ha}c.rotate(-this.getShapeRotation(),
B,D,m+n/2,v+t/2);s=this.scale;m=this.bounds.x/s;v=this.bounds.y/s;n=this.bounds.width/s;t=this.bounds.height/s;this.paintTableForeground(c,m,v,n,t)}};e.prototype.paintTableForeground=function(c,m,v,n,t){n=this.state.view.graph.getTableLines(this.state.cell,"0"!=mxUtils.getValue(this.state.style,"rowLines","1"),"0"!=mxUtils.getValue(this.state.style,"columnLines","1"));for(t=0;t<n.length;t++)b.prototype.paintTableLine(c,n[t],m,v)};e.prototype.configurePointerEvents=function(c){0==this.getTitleSize()?