Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ea=function(la){null!=la&&(J?la.x=Q+(Q-la.x):la.y=Q+(Q-la.y))};ea(Y.getTerminalPoint(!0));ea(Y.getTerminalPoint(!1));this.model.setGeometry(x,Y)}};Graph.prototype.flipChildren=function(x,J,Q){this.model.beginUpdate();try{for(var Y=this.model.getChildCount(x),ea=0;ea<Y;ea++){var la=this.model.getChildAt(x,ea);if(this.model.isEdge(la))this.flipEdgePoints(la,J,Q);else{var oa=this.getCellGeometry(la);null!=oa&&(oa=oa.clone(),J?oa.x=Q+(Q-oa.x-oa.width):oa.y=Q+(Q-oa.y-oa.height),this.model.setGeometry(la,