Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.visitTableCells=function(b,e){var g=null,p=this.model.getChildCells(b,!0);b=this.getActualStartSize(b,!0);for(var y=0;y<p.length;y++){for(var q=this.getActualStartSize(p[y],!0),E=this.model.getChildCells(p[y],!0),L=this.getCellStyle(p[y],!0),T=null,G=[],M=0;M<E.length;M++){var R=this.getCellGeometry(E[M]),W={cell:E[M],rospan:1,colspan:1,row:y,col:M,geo:R};R=null!=R.alternateBounds?R.alternateBounds:R;W.point=new mxPoint(R.width+(null!=T?T.point.x:b.x+q.x),R.height+(null!=g&&null!=
g[0]?g[0].point.y:b.y+q.y));W.actual=W;null!=g&&null!=g[M]&&1<g[M].rowspan?(W.rowspan=g[M].rowspan-1,W.colspan=g[M].colspan,W.actual=g[M].actual):null!=T&&1<T.colspan?(W.rowspan=T.rowspan,W.colspan=T.colspan-1,W.actual=T.actual):(T=this.getCurrentCellStyle(E[M],!0),null!=T&&(W.rowspan=parseInt(T.rowspan||1),W.colspan=parseInt(T.colspan||1)));T=1==mxUtils.getValue(L,mxConstants.STYLE_SWIMLANE_HEAD,1)&&mxUtils.getValue(L,mxConstants.STYLE_STROKECOLOR,mxConstants.NONE)!=mxConstants.NONE;e(W,E.length,
p.length,b.x+(T?q.x:0),b.y+(T?q.y:0));G.push(W);T=W}g=G}};Graph.prototype.getTableLines=function(b,e,g){var p=[],y=[];(e||g)&&this.visitTableCells(b,mxUtils.bind(this,function(q,E,L,T,G){e&&q.row<L-1&&(null==p[q.row]&&(p[q.row]=[new mxPoint(T,q.point.y)]),1<q.rowspan&&p[q.row].push(null),p[q.row].push(q.point));g&&q.col<E-1&&(null==y[q.col]&&(y[q.col]=[new mxPoint(q.point.x,G)]),1<q.colspan&&y[q.col].push(null),y[q.col].push(q.point))}));return p.concat(y)};