Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.useCanvasForExport||".png"!=q||(q=".drawio"),".svg"===q||".xml"===q||".html"===q||".png"===q||".drawio"===q)&&(g=n+q)}d=new LocalFile(this,d,null!=urlParams.title?decodeURIComponent(urlParams.title):g,!0);d.getHash=function(){return b};this.fileLoaded(d,!0)?null!=c&&c():K()||this.handleError({message:mxResources.get("fileNotFound")},mxResources.get("errorLoadingFile"))}else K()||this.handleError({message:mxResources.get("fileNotFound")},mxResources.get("errorLoadingFile"))}),mxUtils.bind(this,