Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
arguments)||0>mxUtils.indexOf(C,jb)};this.executeLayout(function(){lb.execute(O.getDefaultParent());Ra()},!0,ra);ra=null}else if("organic"==za||"auto"==za&&sa.length>C.length){O.view.validate();var Pa=new mxFastOrganicLayout(O);Pa.forceConstant=3*ba;Pa.disableEdgeStyle=!1;Pa.resetEdges=!1;var eb=Pa.isVertexIgnored;Pa.isVertexIgnored=function(jb){return eb.apply(this,arguments)||0>mxUtils.indexOf(C,jb)};this.executeLayout(function(){Pa.execute(O.getDefaultParent());Ra()},!0,ra);ra=null}}this.hideDialog()}finally{O.model.endUpdate()}null!=