Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
B[pa.id][Ga],ka)}}if(null!=Ba)for(la=0;la<q.length;la++)for(pa=q[la],Ga=0;Ga<Ba.length;Ga++)I.setAttributeForCell(pa,mxUtils.trim(Ba[Ga]),null);if(0<v.length){var ma=new mxParallelEdgeLayout(I);ma.spacing=W;ma.checkOverlap=!0;var na=function(){0<ma.spacing&&ma.execute(I.getDefaultParent());for(var Da=0;Da<v.length;Da++){var va=I.getCellGeometry(v[Da]);va.x=Math.round(I.snap(va.x));va.y=Math.round(I.snap(va.y));"auto"==m&&(va.width=Math.round(I.snap(va.width)));"auto"==z&&(va.height=Math.round(I.snap(va.height)))}};