Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=sa&&null!=sa.originalSrc&&(sa=g.createImageForPageLink(sa.originalSrc,ka));ja.background=wa;ja.backgroundImage=null!=sa?new mxImage(sa.src,sa.width,sa.height,sa.x,sa.y):null;ja.pageVisible=da;ja.mathEnabled=oa;var Ja=ja.getGraphBounds;ja.getGraphBounds=function(){var ya=Ja.apply(this,arguments),La=this.backgroundImage;if(null!=La&&null!=La.width&&null!=La.height){var Ca=this.view.translate,va=this.view.scale;ya=mxRectangle.fromRectangle(ya);ya.add(new mxRectangle((Ca.x+La.x)*va,(Ca.y+La.y)*
va,La.width*va,La.height*va))}return ya};var Ha=ja.getGlobalVariable;ja.getGlobalVariable=function(ya){return"page"==ya?ka.getName():"pagenumber"==ya?ia+1:"pagecount"==ya?null!=g.pages?g.pages.length:1:Ha.apply(this,arguments)};document.body.appendChild(ja.container);g.updatePageRoot(ka);ja.model.setRoot(ka.root)}ma=Ka(ja,ma,ia!=la,ka.getId());ja!=Q&&ja.container.parentNode.removeChild(ja.container)}}else ma=Ka(Q);null==ma||null==ma.wnd?g.handleError({message:mxResources.get("errorUpdatingPreview")}):