Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(M){y.apply(this,arguments);this.graph.model.isEdge(M.cell)&&1!=M.style[mxConstants.STYLE_CURVED]&&this.updateLineJumps(M)};mxGraphView.prototype.updateLineJumps=function(M){var R=M.absolutePoints;if(Graph.lineJumpsEnabled){var W=null!=M.routedPoints,d=null;if(null!=R&&null!=this.validEdges&&"none"!==mxUtils.getValue(M.style,"jumpStyle","none")){var f=function(ja,ma,aa){var S=new mxPoint(ma,aa);S.type=ja;d.push(S);S=null!=M.routedPoints?M.routedPoints[d.length-1]:null;return null==S||S.type!=