Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"6px"):mxClient.IS_FF&&(B.style.paddingTop="0px",B.style.marginTop="-2px");if(null!=n)for(K=0;K<n.length;K++)mxUtils.br(B),mxUtils.write(B,n[K]);if(null!=g&&null==b[g]){F.style.visibility="hidden";mxUtils.setOpacity(B,10);var I=new Spinner({lines:12,length:12,width:5,radius:10,rotate:0,color:Editor.isDarkMode()?"#c0c0c0":"#000",speed:1.5,trail:60,shadow:!1,hwaccel:!1,top:"40%",zIndex:2E9});I.spin(v);var G=window.setTimeout(function(){null==b[g]&&(I.stop(),v.style.display="none")},3E4);b.addListener("clientLoaded",
mxUtils.bind(this,function(S,U){null!=b[g]&&U.getProperty("client")==b[g]&&(window.clearTimeout(G),mxUtils.setOpacity(B,100),F.style.visibility="",I.stop(),t(),"drive"==g&&null!=D.parentNode&&D.parentNode.removeChild(D))}))}else t();E.appendChild(v)}f=null!=f?f:2;var k=document.createElement("div");k.style.textAlign="center";k.style.whiteSpace="nowrap";k.style.paddingTop="0px";k.style.paddingBottom="20px";var l=document.createElement("div");l.style.border="1px solid #d3d3d3";l.style.borderWidth="1px 0px 1px 0px";