Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(K){F.stop();null!=this.exportDialog&&null!=this.exportDialog.parentNode&&(this.exportDialog.parentNode.removeChild(this.exportDialog),this.exportDialog=null);this.handleError(K)}),null,null,null,null,null,null,null,Editor.defaultBorder)}mxEvent.consume(u)}),Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(d,f,k,u,z){this.isLocalFileSave()?this.saveLocalFile(k,d,u,z,f):this.saveRequest(d,f,mxUtils.bind(this,function(C,F){return this.createEchoRequest(k,
C,u,z,f,F)}),k,z,u)};EditorUi.prototype.saveRequest=function(d,f,k,u,z,C,F){F=null!=F?F:!mxClient.IS_IOS||!navigator.standalone;var K=this.getServiceCount(!1);isLocalStorage&&K++;var O=4>=K?2:6<K?4:3;d=new CreateDialog(this,d,mxUtils.bind(this,function(H,ka){if("_blank"==ka||null!=H&&0<H.length){var fa=k("_blank"==ka?null:H,ka==App.MODE_DEVICE||"download"==ka||null==ka||"_blank"==ka?"0":"1");null!=fa&&(ka==App.MODE_DEVICE||"download"==ka||"_blank"==ka?fa.simulate(document,"_blank"):this.pickFolder(ka,