Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
A>>>8^Editor.crcTable[(A^l.charCodeAt(O))&255];return(A^-1)>>>0};Editor.writeGraphModelToPng=function(l,A,O,X,U){function aa(pa,xa){var Ca=qa;qa+=xa;return pa.substring(Ca,qa)}function ba(pa){pa=aa(pa,4);return pa.charCodeAt(3)+(pa.charCodeAt(2)<<8)+(pa.charCodeAt(1)<<16)+(pa.charCodeAt(0)<<24)}function ia(pa){return String.fromCharCode(pa>>24&255,pa>>16&255,pa>>8&255,pa&255)}l=l.substring(l.indexOf(",")+1);l=window.atob?atob(l):Base64.decode(l,!0);var qa=0;if(aa(l,8)!=String.fromCharCode(137)+"PNG"+
String.fromCharCode(13,10,26,10))null!=U&&U();else if(aa(l,4),"IHDR"!=aa(l,4))null!=U&&U();else{aa(l,17);U=l.substring(0,qa);do{var ra=ba(l);if("IDAT"==aa(l,4)){U=l.substring(0,qa-8);"pHYs"==A&&"dpi"==O?(O=Math.round(X/.0254),O=ia(O)+ia(O)+String.fromCharCode(1)):O=O+String.fromCharCode(0)+("zTXt"==A?String.fromCharCode(0):"")+X;X=4294967295;X=Editor.updateCRC(X,A,0,4);X=Editor.updateCRC(X,O,0,O.length);U+=ia(O.length)+A+O+ia(X^4294967295);U+=l.substring(qa-8,l.length);break}U+=l.substring(qa-8,qa-
4+ra);aa(l,ra);aa(l,4)}while(ra);return"data:image/png;base64,"+(window.btoa?btoa(U):Base64.encode(U,!0))}};if(window.ColorDialog){FilenameDialog.filenameHelpLink="https://www.drawio.com/doc/faq/save-file-formats";var L=ColorDialog.addRecentColor;ColorDialog.addRecentColor=function(l,A){L.apply(this,arguments);mxSettings.setRecentColors(ColorDialog.recentColors);mxSettings.save()};var T=ColorDialog.resetRecentColors;ColorDialog.resetRecentColors=function(){T.apply(this,arguments);mxSettings.setRecentColors(ColorDialog.recentColors);