Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){null!=t&&(t(),t=null);b.showImageDialog(mxResources.get("addImageUrl"),"",function(V,R,O){C=!1;if(null!=V){if("data:image/"==V.substring(0,11)){var P=V.indexOf(",");0<P&&(V=V.substring(0,P)+";base64,"+V.substring(P+1))}D(V,null,0,0,R,O);c.scrollTop=c.scrollHeight}})});f.setAttribute("id","btnAddImageUrl");f.className="geBtn";d.appendChild(f);this.saveBtnClickHandler=function(V,R,O,P){b.saveLibrary(V,R,O,P)};f=mxUtils.button(mxResources.get("save"),mxUtils.bind(this,function(){null!=t&&