Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(g,x,F,M){null==M&&(M=this.createImageUrlConverter());var Q=0,S=F||{};F=mxUtils.bind(this,function(W,T){W=g.getElementsByTagName(W);for(var X=0;X<W.length;X++)mxUtils.bind(this,function(Z){try{if(null!=Z){var Y=M.convert(Z.getAttribute(T));if(null!=Y&&"data:"!=Y.substring(0,5)){var ba=S[Y];null==ba?(Q++,this.convertImageToDataUri(Y,function(fa){null!=fa&&(S[Y]=fa,Z.setAttribute(T,fa));Q--;0==Q&&x(g)})):Z.setAttribute(T,ba)}else null!=Y&&Z.setAttribute(T,Y)}}catch(fa){}})(W[X])});F("image",
"xlink:href");F("img","src");0==Q&&x(g)};Editor.base64Encode=function(g){for(var x="",F=0,M=g.length,Q,S,W;F<M;){Q=g.charCodeAt(F++)&255;if(F==M){x+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(Q>>2);x+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((Q&3)<<4);x+="==";break}S=g.charCodeAt(F++);if(F==M){x+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(Q>>2);x+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((Q&