Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
x?null:{from:Math.max(0,Math.min(g-1,ca-1)),to:Math.max(0,Math.min(g-1,aa-1))}}d.downloadFile("pdf",null,null,!X.checked,m?!0:!M.checked&&null==ca,!Z.checked,null!=ba&&ba.checked,null,null,Y.checked,null!=fa&&fa.checked,ca)}),null,mxResources.get("export"));d.showDialog(v.container,300,B,!0,!0)}else d.showDialog((new PrintDialog(d,mxResources.get("formatPdf"))).container,360,null!=d.pages&&1<d.pages.length&&(d.editor.editable||"1"!=urlParams["hide-pages"])?470:390,!0,!0)}));d.actions.addAction("open...",