Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxUtils.bind(this,function(Q){this.spinner.stop();x(Graph.xmlDeclaration+"\n"+Graph.svgDoctype+"\n"+mxUtils.getXml(Q))})))}else P=O+".svg",g=this.getFileData(!1,!0,null,mxUtils.bind(this,function(Q){this.spinner.stop();x(Q)}),n)}}catch(Q){this.handleError(Q)}};EditorUi.prototype.createDownloadRequest=function(c,e,k,n,p,t,y,C,G,B,V,R,O){c=this.downloadRequestBuilder(c,e,k,n,p,t,y,C,G,B,V,R,O);e="";for(var P in c)k=c[P],null!=k&&(e+=P+"="+encodeURIComponent(k)+"&");return new mxXmlRequest(EXPORT_URL,
e)};EditorUi.prototype.downloadRequestBuilder=function(c,e,k,n,p,t,y,C,G,B,V,R,O){var P=this.editor.graph,N=P.getGraphBounds();k=this.getFileData(!0,null,null,null,k,0==t?!1:"xmlpng"!=e,null,null,null,!Editor.defaultCompressed,"pdf"==e);var H=null,m=null,v=null;if(N.width*N.height>MAX_AREA||k.length>MAX_REQUEST_SIZE)throw{message:mxResources.get("drawingTooLarge")};B=B?"1":"0";"pdf"==e&&(null!=V?(H=V.from,m=V.to):0==t&&(v="1"));"xmlpng"==e&&(B="1",e="png");if(("xmlpng"==e||"svg"==e)&&null!=this.pages&&