Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.handleError({message:mxResources.get("errorLoadingFile")}));null!=F&&null!=F.parentNode&&0<f.length&&(F.parentNode.removeChild(F),F=null)});null!=ia&&null!=Z&&(/(\.v(dx|sdx?))($|\?)/i.test(Z)||/(\.vs(x|sx?))($|\?)/i.test(Z))?this.importVisio(ia,function(pa){ra(pa,"text/xml")},null,Z):(new XMLHttpRequest).upload&&this.isRemoteFileFormat(V,Z)&&null!=ia?this.isExternalDataComms()?this.parseFile(ia,mxUtils.bind(this,function(pa){4==pa.readyState&&(this.spinner.stop(),200<=pa.status&&299>=pa.status?