Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"_blank")}};EditorUi.prototype.createEchoRequest=function(d,f,k,u,z,B){d="xml="+encodeURIComponent(d);return new mxXmlRequest(SAVE_URL,d+(null!=k?"&mime="+k:"")+(null!=z?"&format="+z:"")+(null!=B?"&base64="+B:"")+(null!=f?"&filename="+encodeURIComponent(f):"")+(u?"&binary=1":""))};EditorUi.prototype.base64ToBlob=function(d,f){f=f||"";d=atob(d);for(var k=d.length,u=Math.ceil(k/1024),z=Array(u),B=0;B<u;++B){for(var F=1024*B,K=Math.min(F+1024,k),N=Array(K-F),H=0;F<K;++H,++F)N[H]=d[F].charCodeAt(0);z[B]=
new Uint8Array(N)}return new Blob(z,{type:f})};EditorUi.prototype.saveLocalFile=function(d,f,k,u,z,B,F,K){B=null!=B?B:!1;F=null!=F?F:"vsdx"!=z&&(!mxClient.IS_IOS||!navigator.standalone);var N=mxUtils.bind(this,function(ka,ea,ca,ja){try{if("_blank"==ea)if(null!=k&&"image/"==k.substring(0,6))this.openInNewWindow(d,k,u);else if(null!=k&&"text/html"==k.substring(0,9)){var ma=new EmbedDialog(this,d);this.showDialog(ma.container,450,240,!0,!0);ma.init()}else{var Z=window.open("about:blank");null==Z?mxUtils.popup(d,