Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"&dpi="+F:"")+"&bg="+(null!=u?u:"none")+"&w="+fa+"&h="+ca+"&border="+C+"&xml="+encodeURIComponent(H))})}else"png"==k?d.exportImage(z,null==u||"none"==u,!0,!1,!1,C,!0,!1,null,K,F):d.exportImage(z,!1,!0,!1,!1,C,!0,!1,"jpeg",K);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);var d=this.editor.graph,f="";if(null!=this.pages)for(var k=0;k<this.pages.length;k++){var u=d;this.currentPage!=this.pages[k]&&(u=this.createTemporaryGraph(d.getStylesheet()),
this.updatePageRoot(this.pages[k]),u.model.setRoot(this.pages[k].root));f+=this.pages[k].getName()+" "+u.getIndexableText()+" "}else f=d.getIndexableText();this.editor.graph.setEnabled(!0);return f};EditorUi.prototype.showRemotelyStoredLibrary=function(d){var f={},k=document.createElement("div");k.style.whiteSpace="nowrap";var u=document.createElement("h3");mxUtils.write(u,mxUtils.htmlEntities(d));u.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:12px";k.appendChild(u);var z=