Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(d,g,n,q,t){this.isLocalFileSave()?this.saveLocalFile(n,d,q,t,g):this.saveRequest(d,g,mxUtils.bind(this,function(v,B){return this.createEchoRequest(n,v,q,t,g,B)}),n,t,q)};EditorUi.prototype.saveRequest=function(d,g,n,q,t,v,B){B=null!=B?B:!mxClient.IS_IOS||!navigator.standalone;var F=this.getServiceCount(!1);isLocalStorage&&F++;var I=4>=F?2:6<F?4:3;d=new CreateDialog(this,d,mxUtils.bind(this,function(G,S){if("_blank"==