Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.createEdgeWipeAnimation=function(b,e){var g=b.absolutePoints.slice(),p=b.segments,y=b.length,q=g.length;return{execute:mxUtils.bind(this,function(E,L){if(null!=b.shape){var T=[g[0]];L=E/L;e||(L=1-L);for(var G=y*L,M=1;M<q;M++)if(G<=p[M-1]){T.push(new mxPoint(g[M-1].x+(g[M].x-g[M-1].x)*G/p[M-1],g[M-1].y+(g[M].y-g[M-1].y)*G/p[M-1]));break}else G-=p[M-1],T.push(g[M]);b.shape.points=T;b.shape.redraw();0==E&&Graph.setOpacityForNodes(this.getNodesForCells([b.cell]),1);null!=b.text&&null!=
b.text.node&&(b.text.node.style.opacity=L)}}),stop:mxUtils.bind(this,function(){null!=b.shape&&(b.shape.points=g,b.shape.redraw(),null!=b.text&&null!=b.text.node&&(b.text.node.style.opacity=""),Graph.setOpacityForNodes(this.getNodesForCells([b.cell]),e?1:0))})}};