Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
S.getStatus()&&299>=S.getStatus())try{this.exportFile(S.getText(),C,t,!0,V,N)}catch(O){this.handleError(O)}else this.handleError({message:mxResources.get("errorSavingFile")})}),mxUtils.bind(this,function(O){this.spinner.stop();this.handleError(O)}))})))}}),mxUtils.bind(this,function(){this.hideDialog()}),mxResources.get("saveAs"),mxResources.get("download"),!1,!1,y,null,1<A,G,n,t,p);A=this.isServices(A)?4<A?390:280:160;this.showDialog(c.container,420,A,!0,!0);c.init()};EditorUi.prototype.isServices=