Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ua.extFonts=cb.viewState.extFonts);null!=db&&null!=db.originalSrc&&(db=l.createImageForPageLink(db.originalSrc,cb));ua.background=Sa;ua.backgroundImage=null!=db?new mxImage(db.src,db.width,db.height,db.x,db.y):null;ua.pageVisible=Fa;ua.mathEnabled=Na;var lb=ua.getGraphBounds;ua.getGraphBounds=function(){var Pa=lb.apply(this,arguments),eb=this.backgroundImage;if(null!=eb&&null!=eb.width&&null!=eb.height){var jb=this.view.translate,ib=this.view.scale;Pa=mxRectangle.fromRectangle(Pa);Pa.add(new mxRectangle((jb.x+
eb.x)*ib,(jb.y+eb.y)*ib,eb.width*ib,eb.height*ib))}return Pa};var kb=ua.getGlobalVariable;ua.getGlobalVariable=function(Pa){return"page"==Pa?cb.getName():"pagenumber"==Pa?Za+1:"pagecount"==Pa?null!=l.pages?l.pages.length:1:kb.apply(this,arguments)};document.body.appendChild(ua.container);l.updatePageRoot(cb);ua.model.setRoot(cb.root)}Ra=fa(ua,Ra,Za!=Ua,cb.getId());ua!=U&&ua.container.parentNode.removeChild(ua.container)}}else Ra=fa(U);null==Ra||null==Ra.wnd?l.handleError({message:mxResources.get("errorUpdatingPreview")}):