Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
t&&p.apply(this,arguments)});k=k||{};k.callbackId=this.remoteInvokeCallbacks.length;this.remoteInvokeCallbacks.push({callback:C,error:G});c=JSON.stringify({event:"remoteInvoke",funtionName:c,functionArgs:e,msgMarkers:k});null!=this.remoteWin?this.remoteWin.postMessage(c,"*"):this.remoteInvokeQueue.push(c)};EditorUi.prototype.handleRemoteInvoke=function(c,e){var k=mxUtils.bind(this,function(B,V){var R={event:"remoteInvokeResponse",msgMarkers:c.msgMarkers};null!=V?R.error={errResp:V}:null!=B&&(R.resp=
B);this.remoteWin.postMessage(JSON.stringify(R),"*")});try{var n=c.funtionName,p=this.remoteInvokableFns[n];if(null!=p&&"function"===typeof this[n]){if(p.allowedDomains){for(var t=!1,y=0;y<p.allowedDomains.length;y++)if(e=="https://"+p.allowedDomains[y]){t=!0;break}if(!t){k(null,"Invalid Call: "+n+" is not allowed.");return}}var C=c.functionArgs;Array.isArray(C)||(C=[]);if(p.isAsync)C.push(function(){k(Array.prototype.slice.apply(arguments))}),C.push(function(B){k(null,B||"Unkown Error")}),this[n].apply(this,
C);else{var G=this[n].apply(this,C);k([G])}}else k(null,"Invalid Call: "+n+" is not found.")}catch(B){k(null,"Invalid Call: An error occurred, "+B.message)}};EditorUi.prototype.openDatabase=function(c,e){if(null==this.database){var k=window.indexedDB||window.mozIndexedDB||window.webkitIndexedDB;if(null!=k)try{var n=k.open("database",2);n.onupgradeneeded=function(p){try{var t=n.result;1>p.oldVersion&&t.createObjectStore("objects",{keyPath:"key"});2>p.oldVersion&&(t.createObjectStore("files",{keyPath:"title"}),