Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m,v,n,t){var B=c.view;n=null!=n&&0<n.length?n[0]:null;var D=c.absolutePoints,ha=D[0];D=D[D.length-1];null!=n&&(n=B.transformControlPoint(c,n));null==ha&&null!=m&&(ha=new mxPoint(m.getCenterX(),m.getCenterY()));null==D&&null!=v&&(D=new mxPoint(v.getCenterX(),v.getCenterY()));var I=Bb.x,va=Bb.y,na=vb.x,bb=vb.y,qb="horizontal"==mxUtils.getValue(c.style,"elbow","horizontal");if(null!=D&&null!=ha){c=function(Ga,Ja,Ia){Ga-=fb.x;var Ha=Ja-fb.y;Ja=(bb*Ga-na*Ha)/(I*bb-va*na);Ga=(va*Ga-I*Ha)/(va*na-I*bb);qb?
(Ia&&(fb=new mxPoint(fb.x+I*Ja,fb.y+va*Ja),t.push(fb)),fb=new mxPoint(fb.x+na*Ga,fb.y+bb*Ga)):(Ia&&(fb=new mxPoint(fb.x+na*Ga,fb.y+bb*Ga),t.push(fb)),fb=new mxPoint(fb.x+I*Ja,fb.y+va*Ja));t.push(fb)};var fb=ha;null==n&&(n=new mxPoint(ha.x+(D.x-ha.x)/2,ha.y+(D.y-ha.y)/2));c(n.x,n.y,!0);c(D.x,D.y,!1)}};mxStyleRegistry.putValue("isometricEdgeStyle",mxEdgeStyle.IsometricConnector);var Cb=Graph.prototype.createEdgeHandler;Graph.prototype.createEdgeHandler=function(c,m){if(m==mxEdgeStyle.IsometricConnector){var v=