Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
App.prototype.fileCreated=function(b,e,f,c,k,m){var u=window.location.pathname;null!=e&&0<e.length&&(u+="?libs="+e);null!=k&&0<k.length&&(u+="?clibs="+k);u=this.getUrl(u);b.getMode()!=App.MODE_DEVICE&&(u+="#"+b.getHash());if(this.spinner.spin(document.body,mxResources.get("inserting"))){var v=b.getData();v=0<v.length?this.editor.extractGraphModel(mxUtils.parseXml(v).documentElement,!0):null;var E=window.location.protocol+"//"+window.location.hostname+u,D=v,A=null;null!=v&&/\.svg$/i.test(b.getTitle())&&(A=
this.createTemporaryGraph(this.editor.graph.getStylesheet()),document.body.appendChild(A.container),D=this.decodeNodeIntoGraph(D,A));b.setData(this.createFileData(v,A,b,E));null!=A&&A.container.parentNode.removeChild(A.container);var L=mxUtils.bind(this,function(){this.spinner.stop()}),H=mxUtils.bind(this,function(){L();var d=this.getCurrentFile();null==f&&null!=d&&(f=!d.isModified()&&null==d.getMode());var g=mxUtils.bind(this,function(){window.openFile=null;this.fileLoaded(b,null,m);f&&b.addAllSavedStatus();
null!=e&&this.sidebar.showEntries(e);if(null!=k){for(var q=[],t=k.split(";"),x=0;x<t.length;x++)q.push(decodeURIComponent(t[x]));this.loadLibraries(q)}null!=c&&c()}),n=mxUtils.bind(this,function(){f||null==d||!d.isModified()?g():this.confirm(mxResources.get("allChangesLost"),null,g,mxResources.get("cancel"),mxResources.get("discardChanges"))});null==f||f?n():(b.constructor==LocalFile&&(window.openFile=new OpenFile(function(){window.openFile=null}),window.openFile.setData(b.getData(),b.getTitle(),
null==b.getMode())),window.openWindow(u,null,n))});b.constructor==LocalFile?H():b.saveFile(b.getTitle(),!1,mxUtils.bind(this,function(){H()}),mxUtils.bind(this,function(d){L();null!=d&&"AbortError"==d.name||this.handleError(d)}))}};