Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
window.getSelection(),J.getRangeAt&&J.rangeCount){var Q=document.createRange();Q.selectNode(x);J.removeAllRanges();J.addRange(Q)}}else(J=document.selection)&&"Control"!=J.type&&(x=J.createRange(),x.collapse(!0),Q=J.createRange(),Q.setEndPoint("StartToStart",x),Q.select())};Graph.prototype.flipEdgePoints=function(x,J,Q){var Y=this.getCellGeometry(x);if(null!=Y){Y=Y.clone();if(null!=Y.points)for(var ea=0;ea<Y.points.length;ea++)J?Y.points[ea].x=Q+(Q-Y.points[ea].x):Y.points[ea].y=Q+(Q-Y.points[ea].y);
ea=function(la){null!=la&&(J?la.x=Q+(Q-la.x):la.y=Q+(Q-la.y))};ea(Y.getTerminalPoint(!0));ea(Y.getTerminalPoint(!1));this.model.setGeometry(x,Y)}};Graph.prototype.flipChildren=function(x,J,Q){this.model.beginUpdate();try{for(var Y=this.model.getChildCount(x),ea=0;ea<Y;ea++){var la=this.model.getChildAt(x,ea);if(this.model.isEdge(la))this.flipEdgePoints(la,J,Q);else{var oa=this.getCellGeometry(la);null!=oa&&(oa=oa.clone(),J?oa.x=Q+(Q-oa.x-oa.width):oa.y=Q+(Q-oa.y-oa.height),this.model.setGeometry(la,