Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
""),F.setAttribute("selected","selected"),mxUtils.write(F,mxResources.get("pickFolder")+"..."),B.insertBefore(F,B.firstChild);U=B.value}function A(){if("reset"==B.value)b.resetRecent("Folders"),B.innerHTML="",R={},D();else if("pickFolder-"==B.value.substring(0,11)){var Q=B.value.substring(11);B.value=U;E(Q)}else if(null!=x&&null!=R[B.value]&&null!=b.editor.diagramFileTypes&&"drawio"==b.editor.diagramFileTypes[x.value].extension){Q=b.getExtensionForService(R[B.value].mode);var P=t.value;null!=Q&&0>
e.indexOf(".")&&0>P.indexOf(".")&&(t.value=P+Q)}N.innerHTML="";mxUtils.write(N,mxResources.get("download"==B.value||"_blank"==B.value?"ok":"save"));""==B.value?N.setAttribute("disabled","disabled"):N.removeAttribute("disabled")}var L=document.createElement("div");L.style.display="flex";L.style.flexWrap="wrap";L.style.whiteSpace="nowrap";var H=document.createElement("div");H.style.display="grid";H.style.gap="5px 8px";H.style.gridAutoRows="auto auto 44px";H.style.gridAutoColumns="0fr minmax(0,1fr)";