Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxConstants.GUIDE_STROKEWIDTH);y.dialect=mxConstants.DIALECT_SVG;y.pointerEvents=!1;y.init(K.graph.getView().getOverlayPane());return y};S=function(y,C){if(y&&null!=K.guidesArrHor)for(y=0;y<K.guidesArrHor.length;y++)K.guidesArrHor[y].node.style.visibility="hidden";if(C&&null!=K.guidesArrVer)for(y=0;y<K.guidesArrVer.length;y++)K.guidesArrVer[y].node.style.visibility="hidden"};if(1<G&&G==q.length-1){G=[];N=K.guidesArrHor;D=[];E=0;t=q[0]==H?1:0;R=q[t].y+q[t].height;if(0<U)for(t=0;t<q.length-1;t++)d=