Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
!1;u.connectionHandler.createEdgeState=function(k){k=u.createEdge(null,null,null,null,null,z);return new mxCellState(this.graph.view,k,this.graph.getCellStyle(k))};var D=u.getDefaultParent(),L=mxUtils.bind(this,function(k){var n=new mxCellOverlay(this.connectImage,"Add outgoing");n.cursor="hand";n.addListener(mxEvent.CLICK,function(p,t){u.connectionHandler.reset();u.clearSelection();var y=u.getCellGeometry(k),A;R(function(){A=u.insertVertex(D,null,"Entry",y.x,y.y,80,30,"rounded=1;");L(A);u.view.refresh(A);