Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
v,n,t,B,D,ha,I,va,na){B*=ha+va;D*=ha+va;var bb=t.clone();return function(){m.begin();m.moveTo(bb.x,bb.y);I?m.lineTo(bb.x-B-D/c,bb.y-D+B/c):m.lineTo(bb.x+D/c-B,bb.y-D-B/c);m.stroke()}}}(2));if("undefined"!==typeof mxVertexHandler){var mb=function(c,m,v){return wb(c,["width"],m,function(n,t,B,D,ha){ha=c.shape.getEdgeWidth()*c.view.scale+v;return new mxPoint(D.x+t*n/4+B*ha/2,D.y+B*n/4-t*ha/2)},function(n,t,B,D,ha,I){n=Math.sqrt(mxUtils.ptSegDistSq(D.x,D.y,ha.x,ha.y,I.x,I.y));c.style.width=Math.round(2*
n)/c.view.scale-v})},wb=function(c,m,v,n,t){return hb(c,m,function(B){var D=c.absolutePoints;if(null!=D&&0<D.length){var ha=D.length-1;B=c.view.translate;var I=c.view.scale,va=v?D[0]:D[ha];D=v?D[1]:D[ha-1];ha=D.x-va.x;var na=D.y-va.y,bb=Math.sqrt(ha*ha+na*na);va=n.call(this,bb,ha/bb,na/bb,va,D);return new mxPoint(va.x/I-B.x,va.y/I-B.y)}return null},function(B,D,ha){var I=c.absolutePoints,va=I.length-1;B=c.view.translate;var na=c.view.scale,bb=v?I[0]:I[va];I=v?I[1]:I[va-1];va=I.x-bb.x;var qb=I.y-bb.y,