Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
z/O.view.scale),ca=Math.floor(ka.height*z/O.view.scale);if(H.length<=MAX_REQUEST_SIZE&&fa*ca<MAX_AREA)if(d.hideDialog(),"png"!=k&&"jpg"!=k&&"jpeg"!=k||!d.isExportToCanvas()){var ja={globalVars:O.getExportVariables()};K&&(ja.grid={size:O.gridSize,steps:O.view.gridSteps,color:O.view.gridColor});d.saveRequest(f,k,function(ma,aa){return new mxXmlRequest(EXPORT_URL,"format="+k+"&base64="+(aa||"0")+(null!=ma?"&filename="+encodeURIComponent(ma):"")+"&extras="+encodeURIComponent(JSON.stringify(ja))+(0<F?
"&dpi="+F:"")+"&bg="+(null!=u?u:"none")+"&w="+fa+"&h="+ca+"&border="+C+"&xml="+encodeURIComponent(H))})}else"png"==k?d.exportImage(z,null==u||"none"==u,!0,!1,!1,C,!0,!1,null,K,F):d.exportImage(z,!1,!0,!1,!1,C,!0,!1,"jpeg",K);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);var d=this.editor.graph,f="";if(null!=this.pages)for(var k=0;k<this.pages.length;k++){var u=d;this.currentPage!=this.pages[k]&&(u=this.createTemporaryGraph(d.getStylesheet()),