Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
g.addListener(mxEvent.SIZE,e);g.container.addEventListener("scroll",c);g.view.addListener("unitChanged",this.unitListener);b.addListener("pageViewChanged",this.pageListener);b.addListener("pageScaleChanged",this.pageListener);b.addListener("pageFormatChanged",this.pageListener);this.setStyle=function(B){A=B;K.style.background=A.bkgClr;q()};this.origGuideMove=mxGuide.prototype.move;mxGuide.prototype.move=function(B,F,I,G){if(f&&4<B.height||!f&&4<B.width){if(null!=D.guidePart)try{d.putImageData(D.guidePart.imgData1,
D.guidePart.x1,D.guidePart.y1),d.putImageData(D.guidePart.imgData2,D.guidePart.x2,D.guidePart.y2),d.putImageData(D.guidePart.imgData3,D.guidePart.x3,D.guidePart.y3)}catch(m){}var S=D.origGuideMove.apply(this,arguments);try{d.lineWidth=.5;d.strokeStyle=A.guideClr;d.setLineDash([2]);if(f){var U=B.y+S.y+E-this.graph.container.scrollTop;var N=0;var P=U+B.height/2;var R=E/2;var M=U+B.height;var p=0;var y=d.getImageData(N,U-1,E,3);n(N,U,E,U);U--;var C=d.getImageData(R,P-1,E,3);n(R,P,E,P);P--;var L=d.getImageData(p,
M-1,E,3);n(p,M,E,M);M--}else U=0,N=B.x+S.x+E-this.graph.container.scrollLeft,P=E/2,R=N+B.width/2,M=0,p=N+B.width,y=d.getImageData(N-1,U,3,E),n(N,U,N,E),N--,C=d.getImageData(R-1,P,3,E),n(R,P,R,E),R--,L=d.getImageData(p-1,M,3,E),n(p,M,p,E),p--;if(null==D.guidePart||D.guidePart.x1!=N||D.guidePart.y1!=U)D.guidePart={imgData1:y,x1:N,y1:U,imgData2:C,x2:R,y2:P,imgData3:L,x3:p,y3:M}}catch(m){}}else S=D.origGuideMove.apply(this,arguments);return S};this.origGuideDestroy=mxGuide.prototype.destroy;mxGuide.prototype.destroy=