Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ha+.5*I):("invRound"==D||"default"==D&&"invRound"==B||"fold"==D||"default"==D&&"fold"==B)&&c.lineTo(I,ha+I):c.lineTo(0,0)};Na.prototype.paintFolds=function(c,m,v,n,t,B,D,ha,I,va,na,bb,qb,fb,Ga){if("fold"==B||"fold"==D||"fold"==ha||"fold"==I||"fold"==va)("fold"==D||"default"==D&&"fold"==B)&&bb&&Ga&&(c.moveTo(0,na),c.lineTo(na,na),c.lineTo(na,0)),("fold"==ha||"default"==ha&&"fold"==B)&&bb&&qb&&(c.moveTo(n-na,0),c.lineTo(n-na,na),c.lineTo(n,na)),("fold"==I||"default"==I&&"fold"==B)&&fb&&qb&&(c.moveTo(n-
na,t),c.lineTo(n-na,t-na),c.lineTo(n,t-na)),("fold"==va||"default"==va&&"fold"==B)&&fb&&Ga&&(c.moveTo(0,t-na),c.lineTo(na,t-na),c.lineTo(na,t))};mxCellRenderer.registerShape(Na.prototype.cst.RECT2,Na);Na.prototype.constraints=null;mxUtils.extend(Za,mxConnector);Za.prototype.origPaintEdgeShape=Za.prototype.paintEdgeShape;Za.prototype.paintEdgeShape=function(c,m,v){for(var n=[],t=0;t<m.length;t++)n.push(mxUtils.clone(m[t]));t=c.state.dashed;var B=c.state.fixDash;Za.prototype.origPaintEdgeShape.apply(this,