Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"#000000")),ta=mxUtils.setStyle(ta,mxConstants.STYLE_GRADIENTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_GRADIENTCOLOR,null)),O.getModel().isVertex(ya[Ca])&&(ta=mxUtils.setStyle(ta,mxConstants.STYLE_FONTCOLOR,mxUtils.getValue(pa,mxConstants.STYLE_FONTCOLOR,null))));O.getModel().setStyle(ya[Ca],ta)}}finally{O.getModel().endUpdate()}}));ea.className="geStyleButton";ea.style.width="36px";ea.style.height=10>=this.defaultColorSchemes.length?"24px":"30px";ea.style.margin="0px 6px 6px 0px";if(null!=Ba){var ha=
Editor.isDarkMode()?"2px solid":"1px solid";null!=Ba.border&&(ha=Ba.border);null!=Ba.gradient?mxClient.IS_IE&&10>document.documentMode?ea.style.filter="progid:DXImageTransform.Microsoft.Gradient(StartColorStr='"+Ba.fill+"', EndColorStr='"+Ba.gradient+"', GradientType=0)":ea.style.backgroundImage="linear-gradient("+Ba.fill+" 0px,"+Ba.gradient+" 100%)":Ba.fill==mxConstants.NONE?ea.style.background="url('"+Dialog.prototype.noColorImage+"')":ea.style.backgroundColor=""==Ba.fill?mxUtils.getValue(O.defaultVertexStyle,
mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff"):Ba.fill||mxUtils.getValue(O.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,Editor.isDarkMode()?Editor.darkColor:"#ffffff");ea.style.border=Ba.stroke==mxConstants.NONE?ha+" transparent":""==Ba.stroke?ha+" "+mxUtils.getValue(O.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?"#ffffff":Editor.darkColor):ha+" "+(Ba.stroke||mxUtils.getValue(O.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,Editor.isDarkMode()?
"#ffffff":Editor.darkColor));null!=Ba.title&&ea.setAttribute("title",Ba.title)}else{ha=mxUtils.getValue(O.defaultVertexStyle,mxConstants.STYLE_FILLCOLOR,"#ffffff");var qa=mxUtils.getValue(O.defaultVertexStyle,mxConstants.STYLE_STROKECOLOR,"#000000");ea.style.backgroundColor=ha;ea.style.border="1px solid "+qa}ea.style.borderRadius="0";T.appendChild(ea)});T.innerText="";for(var za=0;za<ba.length;za++)0<za&&0==mxUtils.mod(za,4)&&mxUtils.br(T),sa(ba[za])});null==this.format.currentScheme?Y(Math.min(Q.length-