Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
T="curved sourcePerimeterSpacing targetPerimeterSpacing startArrow startFill startSize endArrow endFill endSize".split(" "),G=!1,M=!1;this.setDefaultStyle=function(P){try{y.getModel().isEdge(P)?M=!1:G=!1;var V=y.getCellStyle(P,!1),l=[],A=[],N;for(N in V)l.push(V[N]),A.push(N);y.getModel().isEdge(P)?y.currentEdgeStyle={}:y.currentVertexStyle={};this.fireEvent(new mxEventObject("styleChanged","keys",A,"values",l,"cells",[P],"force",!0));y.getModel().isEdge(P)?M=!0:G=!0}catch(X){this.handleError(X)}};