Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Editor.cameraImage,mxResources.get("export"))}};EditorUi.prototype.saveData=function(c,e,k,n,p){this.isLocalFileSave()?this.saveLocalFile(k,c,n,p,e):this.saveRequest(c,e,mxUtils.bind(this,function(t,y){return this.createEchoRequest(k,t,n,p,e,y)}),k,p,n)};EditorUi.prototype.saveRequest=function(c,e,k,n,p,t,y){y=null!=y?y:!mxClient.IS_IOS||!navigator.standalone;var A=this.getServiceCount(!1);isLocalStorage&&A++;var G=4>=A?2:6<A?4:3;c=new CreateDialog(this,c,mxUtils.bind(this,function(C,V){if("_blank"==