Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
c.nodeName&&(y=c.hasAttribute("max-scale")?parseFloat(c.getAttribute("max-scale")):1);c=c.nextSibling}}finally{t.endUpdate()}null!=y&&this.chromelessResize&&this.chromelessResize(!0,y)}return k};EditorUi.prototype.getCopyFilename=function(c,e){var k=null!=c&&null!=c.getTitle()?c.getTitle():this.defaultFilename;c="";var n=k.lastIndexOf(".");0<=n&&(c=k.substring(n),k=k.substring(0,n));if(e){e=k;var p=new Date;k=p.getFullYear();n=p.getMonth()+1;var t=p.getDate(),y=p.getHours(),A=p.getMinutes();p=p.getSeconds();
k=e+(" "+(k+"-"+n+"-"+t+"-"+y+"-"+A+"-"+p))}return k=mxResources.get("copyOf",[k])+c};EditorUi.prototype.fileLoaded=function(c,e,k){var n=this.getCurrentFile();this.fileEditable=this.fileLoadedError=null;this.setCurrentFile(null);var p=!1;this.hideDialog();null!=n&&(EditorUi.debug("File.closed",[n]),n.removeListener(this.descriptorChangedListener),n.close());this.editor.graph.model.clear();this.editor.undoManager.clear();var t=mxUtils.bind(this,function(){this.setGraphEnabled(!1);this.setCurrentFile(null);