Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
App.prototype.createFile=function(b,e,f,c,k,m,u,v,E,D){c=v?null:null!=c?c:this.mode;if(null!=b&&this.spinner.spin(document.body,mxResources.get("inserting"))){e=null!=e?e:this.emptyDiagramXml;null==e||Editor.defaultCompressed||(e=this.uncompressPages(e));var A=mxUtils.bind(this,function(){this.spinner.stop()}),L=mxUtils.bind(this,function(d){A();null==d&&null==this.getCurrentFile()&&null==this.dialog?this.showSplash():null!=d&&this.handleError(d)});try{var H=mxUtils.bind(this,function(d){A();this.fileCreated(d,
f,m,k,E,D)});c==App.MODE_GOOGLE&&null!=this.drive?(null==u&&null!=this.stateArg&&null!=this.stateArg.folderId&&(u=this.stateArg.folderId),this.drive.insertFile(b,e,u,H,L)):c==App.MODE_GITHUB&&null!=this.gitHub?this.gitHub.insertFile(b,e,H,L,!1,u):c==App.MODE_GITLAB&&null!=this.gitLab?this.gitLab.insertFile(b,e,H,L,!1,u):c==App.MODE_TRELLO&&null!=this.trello?this.trello.insertFile(b,e,H,L,!1,u):c==App.MODE_DROPBOX&&null!=this.dropbox?this.dropbox.insertFile(b,e,H,L):c==App.MODE_ONEDRIVE&&null!=this.oneDrive?
this.oneDrive.insertFile(b,e,H,L,!1,u):c==App.MODE_BROWSER?StorageFile.insertFile(this,b,e,H,L):!v&&c==App.MODE_DEVICE&&EditorUi.nativeFileSupport?(A(),this.showSaveFilePicker(mxUtils.bind(this,function(d,g){var n=new LocalFile(this,e,g.name,null,d,g);n.saveFile(g.name,!1,mxUtils.bind(this,function(){this.fileCreated(n,f,m,k,E,D)}),L,!0)}),mxUtils.bind(this,function(d){"AbortError"!=d.name&&L(d)}),this.createFileSystemOptions(b))):(A(),this.fileCreated(new LocalFile(this,e,b,null==c),f,m,k,E,D))}catch(d){A(),
this.handleError(d)}}};