Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(m,z,J,O,T,W,V,Q,X,Z){if(null!=J&&null==mxMarker.markers[J]){var Y=this.getPackageForType(J);null!=Y&&mxStencilRegistry.getStencil(Y)}return M.apply(this,arguments)};var p=mxStencil.prototype.drawShape;mxStencil.prototype.drawShape=function(m,z,J,O,T,W){"1"==mxUtils.getValue(z.style,"lineShape",null)&&m.setFillColor(mxUtils.getValue(z.style,mxConstants.STYLE_STROKECOLOR,this.stroke));return p.apply(this,arguments)};PrintDialog.prototype.create=function(m,z){function J(){ca.value=Math.max(1,