Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
0,0,0,n,0)),c.lineTo(n,t-B),c.arcTo(.5*n,B,0,0,1,.5*n,t),c.arcTo(.5*n,B,0,0,1,0,t-B),c.close(),c.fillAndStroke(),c.setShadow(!1),D&&(c.begin(),c.moveTo(n,B),c.arcTo(.5*n,B,0,0,1,.5*n,2*B),c.arcTo(.5*n,B,0,0,1,0,B),c.stroke()))};mxCellRenderer.registerShape("cylinder3",d);mxUtils.extend(f,mxActor);f.prototype.redrawPath=function(c,m,v,n,t){c.moveTo(0,0);c.quadTo(n/2,.5*t,n,0);c.quadTo(.5*n,t/2,n,t);c.quadTo(n/2,.5*t,0,t);c.quadTo(.5*n,t/2,0,0);c.end()};mxCellRenderer.registerShape("switch",f);mxUtils.extend(k,