Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
J.readAsText(Q)}else this.doImportVisio(Q,e,A,n)}catch(m){A(m)}else try{""==O.responseType||"text"==O.responseType?A({message:O.responseText}):(J=new FileReader,J.onload=function(){try{A({message:JSON.parse(J.result).Message})}catch(m){A(m)}},J.readAsText(O.response))}catch(m){A({})}});O.send(C)}else if(y.clear())try{this.doImportVisio(c,e,A,n)}catch(Q){A(Q)}}else A({message:mxResources.get("serviceUnavailableOrBlocked")})});this.doImportVisio||this.loadingExtensions||this.isOffline(!0)?G():(this.loadingExtensions=