Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
p=-1,t=function(){null!=z?(null!=D&&D(p),p=z(n)):n()};this.drawRuler=t;this.sizeListener=f=u(function(){var y=e.container;l?(y=y.offsetHeight+L,I.height!=y&&(I.height=y,R.style.height=y+"px",t())):(y=y.offsetWidth+L,I.width!=y&&(I.width=y,R.style.width=y+"px",t()))},10);this.pageListener=function(){t()};this.scrollListener=d=u(function(){var y=l?e.container.scrollTop:e.container.scrollLeft;K.lastScroll!=y&&(K.lastScroll=y,t())},10);this.unitListener=function(y,A){K.setUnit(A.getProperty("unit"))};