Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
    H0 V0 Z`)},iUe=function(i,a){const f=a.width,p=a.height,v=.15*f;i.append("path").attr("id","node-"+a.id).attr("class","node-bkg node-"+EE(a.type)).attr("d",`M0 0 a${v},${v} 1 0,0 ${f*.25},${-1*p*.1}
      a${v},${v} 1 0,0 ${f*.25},0
      a${v},${v} 1 0,0 ${f*.25},0
      a${v},${v} 1 0,0 ${f*.25},${1*p*.1}

      a${v},${v} 1 0,0 ${f*.15},${1*p*.33}
      a${v*.8},${v*.8} 1 0,0 0,${1*p*.34}
      a${v},${v} 1 0,0 ${-1*f*.15},${1*p*.33}

      a${v},${v} 1 0,0 ${-1*f*.25},${p*.15}
      a${v},${v} 1 0,0 ${-1*f*.25},0
      a${v},${v} 1 0,0 ${-1*f*.25},0
      a${v},${v} 1 0,0 ${-1*f*.25},${-1*p*.15}

      a${v},${v} 1 0,0 ${-1*f*.1},${-1*p*.33}
      a${v*.8},${v*.8} 1 0,0 0,${-1*p*.34}
      a${v},${v} 1 0,0 ${f*.1},${-1*p*.33}

    H0 V0 Z`)},sUe=function(i,a){i.append("circle").attr("id","node-"+a.id).attr("class","node-bkg node-"+EE(a.type)).attr("r",a.width/2)};function aUe(i,a,f,p,v){return i.insert("polygon",":first-child").attr("points",p.map(function(m){return m.x+","+m.y}).join(" ")).attr("transform","translate("+(v.width-a)/2+", "+f+")")}const oUe=function(i,a){const f=a.height,v=f/4,m=a.width-a.padding+2*v,b=[{x:v,y:0},{x:m-v,y:0},{x:m,y:-f/2},{x:m-v,y:-f},{x:v,y:-f},{x:0,y:-f/2}];aUe(i,m,f,b,a)},cUe=function(i,a){i.append("rect").attr("id","node-"+a.id).attr("class","node-bkg node-"+EE(a.type)).attr("height",a.height).attr("rx",a.padding).attr("ry",a.padding).attr("width",a.width)},hjt={drawNode:function(i,a,f,p){const v=p.htmlLabels,m=f%(ljt-1),b=i.append("g");a.section=m;let E="section-"+m;m<0&&(E+=" section-root"),b.attr("class",(a.class?a.class+" ":"")+"mindmap-node "+E);const C=b.append("g"),D=b.append("g"),N=a.descr.replace(/(<br\/*>)/g,`