Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"geTabContainer geTabItem";C.tabContainer.style.cssText="position:absolute;left:0px;right:0px;bottom:0px;height:30px;white-space:nowrap;visibility:hidden;";u=C.diagramContainer.parentNode;z=document.createElement("div");z.style.cssText="position:absolute;top:0px;left:0px;right:0px;bottom:0px;overflow:hidden;";C.diagramContainer.style.top="47px";var ca=Editor.addBoxImage;if(null!=C.hoverIcons){var ja=C.hoverIcons.update;C.hoverIcons.update=function(){F.freehand.isDrawing()||ja.apply(this,arguments)}}if(null!=