Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=window.console&&console.error(ha,U)}});/(\.v(dx|sdx?))($|\?)/i.test(U.name)||/(\.vs(x|sx?))($|\?)/i.test(U.name)?p(null,U.type,e+W*g,k+W*g,240,160,U.name,function(Z){P(W,function(){return Z})},U):"image"==U.type.substring(0,5)||"application/pdf"==U.type?X.readAsDataURL(U):X.readAsText(U)}})(T)});if(J){J=[];for(v=0;v<c.length;v++)J.push(c[v]);c=J;this.confirmImageResize(function(H){Q=H;B()},G)}else B()};EditorUi.prototype.isBlankFile=function(){return null!=this.pages&&1==this.pages.length&&
this.isDiagramEmpty()&&this.currentPage.getName()==mxResources.get("pageWithNumber",[1])};EditorUi.prototype.confirmImageResize=function(c,e){e=null!=e?e:!1;var k=null!=this.spinner&&null!=this.spinner.pause?this.spinner.pause():function(){},n=isLocalStorage||mxClient.IS_CHROMEAPP?mxSettings.getResizeImages():null,p=function(t,y){if(t||e)mxSettings.setResizeImages(t?y:null),mxSettings.save();k();c(y)};null==n||e?this.showDialog((new ConfirmDialog(this,mxResources.get("resizeLargeImages"),function(t){p(t,