Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxUtils.bind(this,function(T){this.spinner.stop();z(Graph.xmlDeclaration+"\n"+Graph.svgDoctype+"\n"+mxUtils.getXml(T))})))}else Q=N+".svg",l=this.getFileData(!1,!0,null,mxUtils.bind(this,function(T){this.spinner.stop();z(T)}),q)}}catch(T){this.handleError(T)}};EditorUi.prototype.createDownloadRequest=function(d,g,n,q,t,x,B,G,I,F,U,R,N){d=this.downloadRequestBuilder(d,g,n,q,t,x,B,G,I,F,U,R,N);g="";for(var Q in d)n=d[Q],null!=n&&(g+=Q+"="+encodeURIComponent(n)+"&");return new mxXmlRequest(EXPORT_URL,
g)};EditorUi.prototype.downloadRequestBuilder=function(d,g,n,q,t,x,B,G,I,F,U,R,N){var Q=this.editor.graph,P=Q.getGraphBounds();n=this.getFileData(!0,null,null,null,n,0==x?!1:"xmlpng"!=g,null,null,null,!Editor.defaultCompressed,"pdf"==g);var M=null,p=null,y=null;if(P.width*P.height>MAX_AREA||n.length>MAX_REQUEST_SIZE)throw{message:mxResources.get("drawingTooLarge")};F=F?"1":"0";"pdf"==g&&(null!=U?(M=U.from,p=U.to):0==x&&(y="1"));"xmlpng"==g&&(F="1",g="png");if(("xmlpng"==g||"svg"==g)&&null!=this.pages&&