Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"_blank")}};EditorUi.prototype.createEchoRequest=function(d,f,k,u,z,C){d="xml="+encodeURIComponent(d);return new mxXmlRequest(SAVE_URL,d+(null!=k?"&mime="+k:"")+(null!=z?"&format="+z:"")+(null!=C?"&base64="+C:"")+(null!=f?"&filename="+encodeURIComponent(f):"")+(u?"&binary=1":""))};EditorUi.prototype.base64ToBlob=function(d,f){f=f||"";d=atob(d);for(var k=d.length,u=Math.ceil(k/1024),z=Array(u),C=0;C<u;++C){for(var F=1024*C,K=Math.min(F+1024,k),O=Array(K-F),H=0;F<K;++H,++F)O[H]=d[F].charCodeAt(0);z[C]=