Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
la&&Math.abs(this.scrollTop-oa.container.scrollTop)<la&&Math.abs(this.startX-ua.getGraphX())<la&&Math.abs(this.startY-ua.getGraphY())<la&&Q(ua.getEvent()));this.clear()},activate:function(sa){this.currentLink=oa.getAbsoluteUrl(oa.getLinkForCell(sa.cell));null!=this.currentLink&&(this.currentTarget=oa.getLinkTargetForCell(sa.cell),oa.container.style.cursor="pointer",null!=this.highlight&&this.highlight.highlight(sa))},clear:function(){null!=oa.container&&(oa.container.style.cursor=ea);this.currentLink=