Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"cells",[R])),b.fireEvent(new mxEventObject("freehandInserted","cell",R))}finally{b.model.endUpdate()}q&&b.setSelectionCells([R])}}for(R=0;R<k.length;R++)k[R].parentNode.removeChild(k[R]);c=null;k=[];u=[]}B(!1)};b.addListener(mxEvent.FIRE_MOUSE_EVENT,mxUtils.bind(this,function(P,R){P=R.getProperty("eventName");R=R.getProperty("event");P==mxEvent.MOUSE_MOVE&&g&&(null!=R.sourceState&&R.sourceState.setCursor("crosshair"),R.consume())}));b.addMouseListener({mouseDown:mxUtils.bind(this,function(P,R){if(b.isEnabled()&&
!b.isCellLocked(b.getDefaultParent())&&(P=R.getEvent(),g&&!mxEvent.isPopupTrigger(P)&&!mxEvent.isMultiTouchEvent(P))){var M=parseFloat(b.currentVertexStyle[mxConstants.STYLE_STROKEWIDTH]||1);M=Math.max(1,M*b.view.scale);var p=G();c=document.createElementNS("http://www.w3.org/2000/svg","path");c.setAttribute("fill",v?p:"none");c.setAttribute("stroke",p);c.setAttribute("stroke-width",M);"1"==b.currentVertexStyle[mxConstants.STYLE_DASHED]&&(p=b.currentVertexStyle[mxConstants.STYLE_DASH_PATTERN]||"3 3",
p=p.split(" ").map(function(y){return parseFloat(y)*M}).join(" "),c.setAttribute("stroke-dasharray",p));d=[];P=S(P);U(P);l="M"+P.x+" "+P.y;u.push(P);x=[];c.setAttribute("d",v?PerfectFreehand.getSvgPathFromStroke([[P.x,P.y]],t):l);e.appendChild(c);R.consume()}}),mouseMove:mxUtils.bind(this,function(P,R){if(c&&b.isEnabled()&&!b.isCellLocked(b.getDefaultParent())){P=R.getEvent();P=S(P);U(P);var M=N(0);if(M)if(u.push(M),v){var p=[];for(M=0;M<u.length;M++)p.push([u[M].x,u[M].y]);x=[];for(var y=2;y<d.length;y+=