Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){window.openFile=null});if(!e){var p=this.dialog,t=p.close;this.dialog.close=mxUtils.bind(this,function(y){Editor.useLocalStorage=n;t.apply(p,arguments);y&&null==this.getCurrentFile()&&"1"!=urlParams.embed&&this.showSplash()})}}};EditorUi.prototype.importZipFile=function(c,e,k){var n=this,p=mxUtils.bind(this,function(){this.loadingExtensions=!1;"undefined"!==typeof JSZip?JSZip.loadAsync(c).then(function(t){if(mxUtils.isEmptyObject(t.files))k();else{var y=0,C,G=!1;t.forEach(function(B,V){B=
V.name.toLowerCase();"diagram/diagram.xml"==B?(G=!0,V.async("string").then(function(R){0==R.indexOf("<mxfile ")?e(R):k()})):0==B.indexOf("versions/")&&(B=parseInt(B.substr(9)),B>y&&(y=B,C=V))});0<y?C.async("string").then(function(B){(new XMLHttpRequest).upload&&n.isRemoteFileFormat(B,c.name)?n.isOffline()?n.showError(mxResources.get("error"),mxResources.get("notInOffline"),null,k):n.parseFileData(B,mxUtils.bind(this,function(V){4==V.readyState&&(200<=V.status&&299>=V.status?e(V.responseText):k())}),
c.name):k()}):G||k()}},function(t){k(t)}):k()});"undefined"!==typeof JSZip||this.loadingExtensions||this.isOffline(!0)?p():(this.loadingExtensions=!0,mxscript("js/extensions.min.js",p,null,null,null,k))};EditorUi.prototype.importFile=function(c,e,k,n,p,t,y,C,G,B,V,R){B=null!=B?B:!0;var O=!1,P=null,N=mxUtils.bind(this,function(H){var m=null;null!=H&&"<mxlibrary"==H.substring(0,10)?this.loadLibrary(new LocalLibrary(this,H,y)):m=this.importXml(H,k,n,B,null,null!=R?mxEvent.isControlDown(R):null);null!=