Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.getCellGeometry(oa[x]);null!=Ua&&(Fa.height=Ua.height)}Q.add(oa[x],ua,ea+(J?0:1))}var Ra=this.getCellGeometry(Y);null!=Ra&&(Ra=Ra.clone(),Ra.width+=wa,Q.setGeometry(Y,Ra))}finally{Q.endUpdate()}};Graph.prototype.deleteLane=function(x){var J=this.getModel();J.beginUpdate();try{var Q=null;Q="stackLayout"==this.getCurrentCellStyle(x).childLayout?x:J.getParent(x);var Y=J.getChildCells(Q,!0);0==Y.length?J.remove(Q):(Q==x&&(x=Y[Y.length-1]),J.remove(x))}finally{J.endUpdate()}};Graph.prototype.insertLane=