Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxEvent.consume(aa)))}}catch(P){d.handleError(P)}mxEvent.isConsumed(aa)||H.apply(this,arguments)};var ka=f.connectVertex;f.connectVertex=function(aa,S,da,P,V,l,A){var N=f.getIncomingTreeEdges(aa);if(p(aa)){var X=L(aa),U=X==mxConstants.DIRECTION_EAST||X==mxConstants.DIRECTION_WEST,Z=S==mxConstants.DIRECTION_EAST||S==mxConstants.DIRECTION_WEST;return X==S||0==N.length?M(aa,S):U==Z?G(aa):T(aa,S!=mxConstants.DIRECTION_NORTH&&S!=mxConstants.DIRECTION_WEST)}return ka.apply(this,arguments)};f.getSubtree=