Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"cursor:pointer;");c&&(H+="max-width:100%;");var m="";k&&(m=' width="'+Math.round(B.width)+'" height="'+Math.round(B.height)+'"');y('<img src="'+P+'"'+m+(""!=H?' style="'+H+'"':"")+N+"/>")}var B=this.editor.graph.getGraphBounds(),V=this.getSelectedPageIndex();if(this.isExportToCanvas())this.editor.exportToCanvas(mxUtils.bind(this,function(P){var N=n?this.getFileData(!0):null;P=this.createImageDataUri(P,N,"png");G(P)}),null,null,null,mxUtils.bind(this,function(P){C({message:mxResources.get("unknownError")})}),