Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
N+"&border="+v+"&xml="+encodeURIComponent(G))})}else"png"==n?d.exportImage(t,null==q||"none"==q,!0,!1,!1,v,!0,!1,null,F,B):d.exportImage(t,!1,!0,!1,!1,v,!0,!1,"jpeg",F);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);var d=this.editor.graph,g="";if(null!=this.pages)for(var n=0;n<this.pages.length;n++){var q=d;this.currentPage!=this.pages[n]&&(q=this.createTemporaryGraph(d.getStylesheet()),this.updatePageRoot(this.pages[n]),
q.model.setRoot(this.pages[n].root));g+=this.pages[n].getName()+" "+q.getIndexableText()+" "}else g=d.getIndexableText();this.editor.graph.setEnabled(!0);return g};EditorUi.prototype.showRemotelyStoredLibrary=function(d){var g={},n=document.createElement("div");n.style.whiteSpace="nowrap";var q=document.createElement("h3");mxUtils.write(q,mxUtils.htmlEntities(d));q.style.cssText="width:100%;text-align:center;margin-top:0px;margin-bottom:12px";n.appendChild(q);var t=document.createElement("div");t.style.cssText=