Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
wa,La.width*wa,La.height*wa))}return Aa};var Ja=ja.getGlobalVariable;ja.getGlobalVariable=function(Aa){return"page"==Aa?ka.getName():"pagenumber"==Aa?ia+1:"pagecount"==Aa?null!=l.pages?l.pages.length:1:Ja.apply(this,arguments)};document.body.appendChild(ja.container);l.updatePageRoot(ka);ja.model.setRoot(ka.root)}na=Ha(ja,na,ia!=ma,ka.getId());ja!=T&&ja.container.parentNode.removeChild(ja.container)}}else na=Ha(T);null==na||null==na.wnd?l.handleError({message:mxResources.get("errorUpdatingPreview")}):
(na.mathEnabled&&(ma=na.wnd.document,Qa&&(na.wnd.IMMEDIATE_PRINT=!0),ma.writeln('<script type="text/javascript" src="'+DRAWIO_BASE_URL+'/js/math-print.js">\x3c/script>')),na.closeDocument(),Graph.rewritePageLinks(na.wnd.document),!na.mathEnabled&&Qa&&PrintDialog.printPreview(na));null!=Ia&&(T.shapeForegroundColor=Va,T.shapeBackgroundColor=Ua,T.stylesheet=Ia,T.refresh())}}var T=l.editor.graph,W=document.createElement("div"),V=document.createElement("h3");V.style.width="100%";V.style.textAlign="center";