Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null,null,function(V){console.log(V)},600,null,null,null,null,null,R):(u(M,void 0),l(M))}function t(V){function Q(X){O.style.background="transparent";O.innerText="";var Z=document.createElement("div");Z.className="odPreviewStatus";mxUtils.write(Z,X);O.appendChild(Z);N.stop()}if(null!=O)if(O.style.background="transparent",O.innerText="",null==V||V.folder||/\.drawiolib$/.test(V.name))Q(mxResources.get("noPreview"));else try{null!=V.remoteItem&&(V=V.remoteItem),m=V,N.spin(O),n(V,function(X){N.stop();
if(m==V)if("mxlibrary"==X.documentElement.nodeName)Q(mxResources.get("noPreview"));else{var Z=X.getElementsByTagName("diagram");R=AspectDialog.prototype.createViewer(O,0==Z.length?X.documentElement:Z[0],null,"transparent")}},function(){M=null;Q(mxResources.get("notADiagramFile"))})}catch(X){M=null,Q(mxResources.get("notADiagramFile"))}}function v(){var V=g(".odFilesBreadcrumb");if(null!=V){V.innerText="";for(var Q=0;Q<C.length-1;Q++){var X=document.createElement("span");X.className="odBCFolder";X.innerHTML=