Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
p.length,b.x+(T?q.x:0),b.y+(T?q.y:0));G.push(W);T=W}g=G}};Graph.prototype.getTableLines=function(b,e,g){var p=[],y=[];(e||g)&&this.visitTableCells(b,mxUtils.bind(this,function(q,E,L,T,G){e&&q.row<L-1&&(null==p[q.row]&&(p[q.row]=[new mxPoint(T,q.point.y)]),1<q.rowspan&&p[q.row].push(null),p[q.row].push(q.point));g&&q.col<E-1&&(null==y[q.col]&&(y[q.col]=[new mxPoint(q.point.x,G)]),1<q.colspan&&y[q.col].push(null),y[q.col].push(q.point))}));return p.concat(y)};