Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
""),B.setAttribute("selected","selected"),mxUtils.write(B,mxResources.get("pickFolder")+"..."),y.insertBefore(B,y.firstChild);V=y.value}function E(){if("reset"==y.value)b.resetRecent("Folders"),y.innerHTML="",R={},K();else if("pickFolder-"==y.value.substring(0,11)){var P=y.value.substring(11);y.value=V;L(P)}else if(null!=t&&null!=R[y.value]&&null!=b.editor.diagramFileTypes&&"drawio"==b.editor.diagramFileTypes[t.value].extension){P=b.getExtensionForService(R[y.value].mode);var N=p.value;null!=P&&0>
f.indexOf(".")&&0>N.indexOf(".")&&(p.value=N+P)}O.innerHTML="";mxUtils.write(O,mxResources.get("download"==y.value||"_blank"==y.value?"ok":"save"));""==y.value?O.setAttribute("disabled","disabled"):O.removeAttribute("disabled")}var U=document.createElement("div");U.style.display="flex";U.style.flexWrap="wrap";U.style.whiteSpace="nowrap";var J=document.createElement("div");J.style.display="grid";J.style.gap="5px 8px";J.style.gridAutoRows="auto auto 44px";J.style.gridAutoColumns="0fr minmax(0,1fr)";