Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
R=this.xmlNode)});var W=this.graph.setBackgroundImage;this.graph.setBackgroundImage=function(k){if(null!=k&&Graph.isPageLink(k.src)){var u=k.src,z=u.indexOf(",");0<z&&(z=L.getIndexById(u.substring(z+1)),0<=z&&(k=L.getImageForGraphModel(Editor.parseDiagramNode(L.diagrams[z])),k.originalSrc=u))}W.apply(this,arguments)};var d=this.graph.getGraphBounds;this.graph.getGraphBounds=function(k){var u=d.apply(this,arguments);k=this.backgroundImage;if(null!=k){var z=this.view.translate,B=this.view.scale;u=mxRectangle.fromRectangle(u);
u.add(new mxRectangle((z.x+k.x)*B,(z.y+k.y)*B,k.width*B,k.height*B))}return u};this.addListener("xmlNodeChanged",G);G();urlParams.page=L.currentPage;G=null;this.graph.getModel().beginUpdate();try{urlParams.nav=0!=this.graphConfig.nav?"1":"0",this.editor.setGraphXml(this.xmlNode),this.graph.view.scale=this.graphConfig.zoom||1,G=this.setLayersVisible(),this.responsive||(this.graph.border=null!=this.graphConfig.border?this.graphConfig.border:8)}finally{this.graph.getModel().endUpdate()}this.responsive||