Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
p/G.view.scale);if(C.length<=MAX_REQUEST_SIZE&&S*N<MAX_AREA)if(c.hideDialog(),"png"!=k&&"jpg"!=k&&"jpeg"!=k||!c.isExportToCanvas()){var O={globalVars:G.getExportVariables()};A&&(O.grid={size:G.gridSize,steps:G.view.gridSteps,color:G.view.gridColor});c.saveRequest(e,k,function(Q,J){return new mxXmlRequest(EXPORT_URL,"format="+k+"&base64="+(J||"0")+(null!=Q?"&filename="+encodeURIComponent(Q):"")+"&extras="+encodeURIComponent(JSON.stringify(O))+(0<y?"&dpi="+y:"")+"&bg="+(null!=n?n:"none")+"&w="+S+"&h="+
N+"&border="+t+"&xml="+encodeURIComponent(C))})}else"png"==k?c.exportImage(p,null==n||"none"==n,!0,!1,!1,t,!0,!1,null,A,y):c.exportImage(p,!1,!0,!1,!1,t,!0,!1,"jpeg",A);else mxUtils.alert(mxResources.get("drawingTooLarge"))}});EditorUi.prototype.getDiagramTextContent=function(){this.editor.graph.setEnabled(!1);var c=this.editor.graph,e="";if(null!=this.pages)for(var k=0;k<this.pages.length;k++){var n=c;this.currentPage!=this.pages[k]&&(n=this.createTemporaryGraph(c.getStylesheet()),this.updatePageRoot(this.pages[k]),