Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
l.appendChild(q);f.appendChild(l);this.container=f},ConnectionPointsDialog=function(b,f){function l(){null!=q&&q.destroy()}var d=document.createElement("div");d.style.userSelect="none";var q=null;this.init=function(){function u(Q,J,m){Q=new mxCell("",new mxGeometry(Q,J,6,6),"shape=mxgraph.basic.x;fillColor=#29b6f2;strokeColor=#29b6f2;points=[];rotatable=0;resizable=0;connectable=0;editable=0;");Q.vertex=!0;Q.cp=!0;Q.constObj=m;return R.addCell(Q)}function z(Q){Q=R.getSelectionCells();R.deleteCells(Q)}