Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
t/I.view.scale);if(G.length<=MAX_REQUEST_SIZE&&U*N<MAX_AREA)if(d.hideDialog(),"png"!=n&&"jpg"!=n&&"jpeg"!=n||!d.isExportToCanvas()){var P={globalVars:I.getExportVariables()};F&&(P.grid={size:I.gridSize,steps:I.view.gridSteps,color:I.view.gridColor});d.saveRequest(g,n,function(R,M){return new mxXmlRequest(EXPORT_URL,"format="+n+"&base64="+(M||"0")+(null!=R?"&filename="+encodeURIComponent(R):"")+"&extras="+encodeURIComponent(JSON.stringify(P))+(0<B?"&dpi="+B:"")+"&bg="+(null!=q?q:"none")+"&w="+U+"&h="+
N+"&border="+v+"&xml="+encodeURIComponent(G))})}else"png"==n?d.exportImage(t,null==q||"none"==q,!0,!1,!1,v,!0,!1,null,F,B):d.exportImage(t,!1,!0,!1,!1,v,!0,!1,"jpeg",F);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);var d=this.editor.graph,g="";if(null!=this.pages)for(var n=0;n<this.pages.length;n++){var q=d;this.currentPage!=this.pages[n]&&(q=this.createTemporaryGraph(d.getStylesheet()),this.updatePageRoot(this.pages[n]),