Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
na,t),c.lineTo(n-na,t-na),c.lineTo(n,t-na)),("fold"==va||"default"==va&&"fold"==B)&&fb&&Ga&&(c.moveTo(0,t-na),c.lineTo(na,t-na),c.lineTo(na,t))};mxCellRenderer.registerShape(Na.prototype.cst.RECT2,Na);Na.prototype.constraints=null;mxUtils.extend(Za,mxConnector);Za.prototype.origPaintEdgeShape=Za.prototype.paintEdgeShape;Za.prototype.paintEdgeShape=function(c,m,v){for(var n=[],t=0;t<m.length;t++)n.push(mxUtils.clone(m[t]));t=c.state.dashed;var B=c.state.fixDash;Za.prototype.origPaintEdgeShape.apply(this,
[c,n,v]);3<=c.state.strokeWidth&&(n=mxUtils.getValue(this.style,"fillColor",null),null!=n&&(c.setStrokeColor(n),c.setStrokeWidth(c.state.strokeWidth-2),c.setDashed(t,B),Za.prototype.origPaintEdgeShape.apply(this,[c,m,v])))};mxCellRenderer.registerShape("filledEdge",Za);"undefined"!==typeof StyleFormatPanel&&function(){var c=StyleFormatPanel.prototype.getCustomColors;StyleFormatPanel.prototype.getCustomColors=function(){var m=this.editorUi.getSelectionState(),v=c.apply(this,arguments);"umlFrame"==