Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
eb.x)*ib,(jb.y+eb.y)*ib,eb.width*ib,eb.height*ib))}return Pa};var kb=ua.getGlobalVariable;ua.getGlobalVariable=function(Pa){return"page"==Pa?cb.getName():"pagenumber"==Pa?Za+1:"pagecount"==Pa?null!=l.pages?l.pages.length:1:kb.apply(this,arguments)};document.body.appendChild(ua.container);l.updatePageRoot(cb);ua.model.setRoot(cb.root)}Ra=fa(ua,Ra,Za!=Ua,cb.getId());ua!=U&&ua.container.parentNode.removeChild(ua.container)}}else Ra=fa(U);null==Ra||null==Ra.wnd?l.handleError({message:mxResources.get("errorUpdatingPreview")}):
(Ra.mathEnabled&&(Ua=Ra.wnd.document,Y&&(Ra.wnd.IMMEDIATE_PRINT=!0),Ua.writeln('<script type="text/javascript" src="'+DRAWIO_BASE_URL+'/js/math-print.js">\x3c/script>')),Ra.closeDocument(),Graph.rewritePageLinks(Ra.wnd.document),!Ra.mathEnabled&&Y&&PrintDialog.printPreview(Ra));null!=oa&&(U.shapeForegroundColor=wa,U.shapeBackgroundColor=sa,U.stylesheet=oa,U.refresh())}}var U=l.editor.graph,aa=document.createElement("div"),ba=document.createElement("h3");ba.style.width="100%";ba.style.textAlign="center";