Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=B.viewState.backgroundImage.originalSrc&&(K=new mxCodec(mxUtils.createXmlDocument()),K=K.encode(new mxGraphModel(B.root)),this.editor.graph.saveViewState(B.viewState,K,null,u),F=F.cloneNode(!1),mxUtils.setTextContent(F,Graph.compressNode(K))));d(F)}return z};EditorUi.prototype.anonymizeString=function(d,f){for(var k=[],u=0;u<d.length;u++){var z=d.charAt(u);0<=EditorUi.ignoredAnonymizedChars.indexOf(z)?k.push(z):isNaN(parseInt(z))?z.toLowerCase()!=z?k.push(String.fromCharCode(65+Math.round(25*
Math.random()))):z.toUpperCase()!=z?k.push(String.fromCharCode(97+Math.round(25*Math.random()))):/\s/.test(z)?k.push(" "):k.push("?"):k.push(f?"0":Math.round(9*Math.random()))}return k.join("")};EditorUi.prototype.anonymizePatch=function(d){if(null!=d[EditorUi.DIFF_INSERT])for(var f=0;f<d[EditorUi.DIFF_INSERT].length;f++)try{var k=mxUtils.parseXml(d[EditorUi.DIFF_INSERT][f].data).documentElement.cloneNode(!1);null!=k.getAttribute("name")&&k.setAttribute("name",this.anonymizeString(k.getAttribute("name")));