Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
1)),function(ta){Oa(ta,O)},mxUtils.bind(this,function(ta){this.handleError(ta)}),fa)):null!=H&&"function"===typeof H.substring&&(new XMLHttpRequest).upload&&this.isRemoteFileFormat(H,"")?this.isOffline()?this.showError(mxResources.get("error"),mxResources.get("notInOffline")):this.parseFileData(H,mxUtils.bind(this,function(ta){4==ta.readyState&&(200<=ta.status&&299>=ta.status&&"<mxGraphModel"==ta.responseText.substring(0,13)?Oa(ta.responseText,O):this.handleError({message:413==ta.status?mxResources.get("diagramTooLarge"):
mxResources.get("unknownError")}))}),""):null!=H&&"function"===typeof H.substring&&this.isLucidChartData(H)?this.convertLucidChart(H,mxUtils.bind(this,function(ta){Oa(ta)}),mxUtils.bind(this,function(ta){this.handleError(ta)})):null==H||"object"!==typeof H||null==H.format||null==H.data&&null==H.url?(H=fa(H),Oa(H,O)):this.loadDescriptor(H,mxUtils.bind(this,function(ta){Oa(Qa(),O)}),mxUtils.bind(this,function(ta){this.handleError(ta,mxResources.get("errorLoadingFile"))}))}}));var F=window.opener||window.parent;