Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Fa.length-1?0:Pa.x*la);this.shape.bounds.width=oa.width-(Za==Fa.length-1?0:Pa.width+Pa.x+la)}this.shape.redraw()}};var kb=!1;Sa.setPosition=function(Pa,eb,jb){lb=Math.max(Graph.minTableRowHeight-Pa.height,eb.y-Pa.y-Pa.height);kb=mxEvent.isShiftDown(jb.getEvent());null!=db&&kb&&(lb=Math.min(lb,db.height-Graph.minTableRowHeight))};Sa.execute=function(Pa){if(0!=lb)Y.setTableRowHeight(this.state.cell,lb,!kb);else if(!Q.blockDelayedSelection){var eb=Y.getCellAt(Pa.getGraphX(),Pa.getGraphY())||oa.cell;
Y.graphHandler.selectCellForEvent(eb,Pa)}lb=0};Sa.reset=function(){lb=0}}x.push(Sa)})(ea);for(ea=0;ea<Ua.length;ea++)mxUtils.bind(this,function(Za){var cb=Y.view.getState(Ua[Za]),Sa=Y.getCellGeometry(Ua[Za]),db=null!=Sa.alternateBounds?Sa.alternateBounds:Sa;null==cb&&(cb=new mxCellState(Y.view,Ua[Za],Y.getCellStyle(Ua[Za])),cb.x=oa.x+Sa.x*la,cb.y=oa.y+Sa.y*la,cb.width=db.width*la,cb.height=db.height*la,cb.updateCachedBounds());Sa=Za<Ua.length-1?Ua[Za+1]:null;Sa=null!=Sa?Y.getCellGeometry(Sa):null;