Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
e.addListener(mxEvent.SIZE,f);e.container.addEventListener("scroll",d);e.view.addListener("unitChanged",this.unitListener);b.addListener("pageViewChanged",this.pageListener);b.addListener("pageScaleChanged",this.pageListener);b.addListener("pageFormatChanged",this.pageListener);this.setStyle=function(y){E=y;R.style.background=E.bkgClr;n()};this.origGuideMove=mxGuide.prototype.move;mxGuide.prototype.move=function(y,A,G,C){if(l&&4<y.height||!l&&4<y.width){if(null!=K.guidePart)try{c.putImageData(K.guidePart.imgData1,
K.guidePart.x1,K.guidePart.y1),c.putImageData(K.guidePart.imgData2,K.guidePart.x2,K.guidePart.y2),c.putImageData(K.guidePart.imgData3,K.guidePart.x3,K.guidePart.y3)}catch(g){}var V=K.origGuideMove.apply(this,arguments);try{c.lineWidth=.5;c.strokeStyle=E.guideClr;c.setLineDash([2]);if(l){var S=y.y+V.y+L-this.graph.container.scrollTop;var N=0;var O=S+y.height/2;var Q=L/2;var J=S+y.height;var m=0;var v=c.getImageData(N,S-1,L,3);k(N,S,L,S);S--;var B=c.getImageData(Q,O-1,L,3);k(Q,O,L,O);O--;var H=c.getImageData(m,
J-1,L,3);k(m,J,L,J);J--}else S=0,N=y.x+V.x+L-this.graph.container.scrollLeft,O=L/2,Q=N+y.width/2,J=0,m=N+y.width,v=c.getImageData(N-1,S,3,L),k(N,S,N,L),N--,B=c.getImageData(Q-1,O,3,L),k(Q,O,Q,L),Q--,H=c.getImageData(m-1,J,3,L),k(m,J,m,L),m--;if(null==K.guidePart||K.guidePart.x1!=N||K.guidePart.y1!=S)K.guidePart={imgData1:v,x1:N,y1:S,imgData2:B,x2:Q,y2:O,imgData3:H,x3:m,y3:J}}catch(g){}}else V=K.origGuideMove.apply(this,arguments);return V};this.origGuideDestroy=mxGuide.prototype.destroy;mxGuide.prototype.destroy=