Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
u)for(z=0;z<u.length;z++)u[z].node.style.visibility=d?"visible":"hidden"};var l=mxGuide.prototype.destroy;mxGuide.prototype.destroy=function(){l.call(this);var d=this.guidesArrVer,q=this.guidesArrHor;if(null!=d){for(var u=0;u<d.length;u++)d[u].destroy();this.guidesArrVer=null}if(null!=q){for(u=0;u<q.length;u++)q[u].destroy();this.guidesArrHor=null}}})();function mxRuler(b,f,l,d){function q(){var y=b.diagramContainer;R.style.top=y.offsetTop-L+"px";R.style.left=y.offsetLeft-L+"px";R.style.width=(l?0:y.offsetWidth)+L+"px";R.style.height=(l?y.offsetHeight:0)+L+"px"}function u(y,A,G){if(null!=z)return y;var C;return function(){var V=this,S=arguments,N=G&&!C;clearTimeout(C);C=setTimeout(function(){C=null;G||y.apply(V,S)},A);N&&y.apply(V,S)}}var z=window.requestAnimationFrame||window.mozRequestAnimationFrame||window.webkitRequestAnimationFrame||window.msRequestAnimationFrame,