Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(S){try{f(S.target.result)}catch(da){K({message:mxResources.get("errorLoadingFile")})}});aa.readAsText(ma)}else this.doImportVisio(ma,f,K,u)}catch(S){K(S)}else try{""==ja.responseType||"text"==ja.responseType?K({message:ja.responseText}):(aa=new FileReader,aa.onload=function(){try{K({message:JSON.parse(aa.result).Message})}catch(S){K(S)}},aa.readAsText(ja.response))}catch(S){K({})}});ja.send(H)}else if(F.clear())try{this.doImportVisio(d,f,K,u)}catch(ma){K(ma)}}else K({message:mxResources.get("serviceUnavailableOrBlocked")})});