Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){window.openFile=null});if(!g){var t=this.dialog,x=t.close;this.dialog.close=mxUtils.bind(this,function(B){Editor.useLocalStorage=q;x.apply(t,arguments);B&&null==this.getCurrentFile()&&"1"!=urlParams.embed&&this.showSplash()})}}};EditorUi.prototype.importZipFile=function(d,g,n){var q=this,t=mxUtils.bind(this,function(){this.loadingExtensions=!1;"undefined"!==typeof JSZip?JSZip.loadAsync(d).then(function(x){if(mxUtils.isEmptyObject(x.files))n();else{var B=0,G,I=!1;x.forEach(function(F,U){F=
U.name.toLowerCase();"diagram/diagram.xml"==F?(I=!0,U.async("string").then(function(R){0==R.indexOf("<mxfile ")?g(R):n()})):0==F.indexOf("versions/")&&(F=parseInt(F.substr(9)),F>B&&(B=F,G=U))});0<B?G.async("string").then(function(F){(new XMLHttpRequest).upload&&q.isRemoteFileFormat(F,d.name)?q.isOffline()?q.showError(mxResources.get("error"),mxResources.get("notInOffline"),null,n):q.parseFileData(F,mxUtils.bind(this,function(U){4==U.readyState&&(200<=U.status&&299>=U.status?g(U.responseText):n())}),
d.name):n()}):I||n()}},function(x){n(x)}):n()});"undefined"!==typeof JSZip||this.loadingExtensions||this.isOffline(!0)?t():(this.loadingExtensions=!0,mxscript("js/extensions.min.js",t,null,null,null,n))};EditorUi.prototype.importFile=function(d,g,n,q,t,x,B,G,I,F,U,R){F=null!=F?F:!0;var N=!1,Q=null,P=mxUtils.bind(this,function(M){var p=null;null!=M&&"<mxlibrary"==M.substring(0,10)?this.loadLibrary(new LocalLibrary(this,M,B)):p=this.importXml(M,n,q,F,null,null!=R?mxEvent.isControlDown(R):null);null!=