Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxResources.get("loading")))for(var z=d.length,J=z,O=[],T=mxUtils.bind(this,function(V,S){O[V]=S;if(0==--J){this.spinner.stop();if(null!=G)G(O);else{var X=[];K.getModel().beginUpdate();try{for(V=0;V<O.length;V++){var Z=O[V]();null!=Z&&(X=X.concat(Z))}}finally{K.getModel().endUpdate()}}x(X)}}),W=0;W<z;W++)mxUtils.bind(this,function(V){var S=d[V];if(null!=S){var X=new FileReader;X.onload=mxUtils.bind(this,function(Z){if(null==B||B(S))try{if("image/"==S.type.substring(0,6))if("image/svg"==S.type.substring(0,