Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
window.console&&console.error(J,C,L)}}function k(C){if(b.shareCursorPosition&&!A.isMouseDown){var L=mxUtils.getOffset(A.container),m=A.view.translate,z=A.view.scale,J=null!=b.currentPage?b.currentPage.getId():null;c("cursor",{pageId:J,x:Math.round((C.getX()-L.x+A.container.scrollLeft)/z-m.x),y:Math.round((C.getY()-L.y+A.container.scrollTop)/z-m.y)})}}function l(C,L){var m=null!=b.currentPage?b.currentPage.getId():null;if(null!=C&&null!=C.cursor&&null!=C.lastCursor)if(null!=C.lastCursor.hide||!b.isShowRemoteCursors()||