Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
O&&A(Editor.svgBrokenImage.src)});else{var U=new Image;this.crossOriginImages&&(U.crossOrigin="anonymous");U.onload=function(){window.clearTimeout(X);if(O)try{var aa=document.createElement("canvas"),ba=aa.getContext("2d");aa.height=U.height;aa.width=U.width;ba.drawImage(U,0,0);A(aa.toDataURL())}catch(ia){A(Editor.svgBrokenImage.src)}};U.onerror=function(){window.clearTimeout(X);O&&A(Editor.svgBrokenImage.src)};U.src=l}}catch(aa){A(Editor.svgBrokenImage.src)}};Editor.prototype.convertImages=function(l,
A,O,X){null==X&&(X=this.createImageUrlConverter());var U=0,aa=O||{};O=mxUtils.bind(this,function(ba,ia){ba=l.getElementsByTagName(ba);for(var qa=0;qa<ba.length;qa++)mxUtils.bind(this,function(ra){try{if(null!=ra){var pa=X.convert(ra.getAttribute(ia));if(null!=pa&&"data:"!=pa.substring(0,5)){var xa=aa[pa];null==xa?(U++,this.convertImageToDataUri(pa,function(Ca){null!=Ca&&(aa[pa]=Ca,ra.setAttribute(ia,Ca));U--;0==U&&A(l)})):ra.setAttribute(ia,xa)}else null!=pa&&ra.setAttribute(ia,pa)}}catch(Ca){}})(ba[qa])});
O("image","xlink:href");O("img","src");0==U&&A(l)};Editor.base64Encode=function(l){for(var A="",O=0,X=l.length,U,aa,ba;O<X;){U=l.charCodeAt(O++)&255;if(O==X){A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(U>>2);A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((U&3)<<4);A+="==";break}aa=l.charCodeAt(O++);if(O==X){A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(U>>2);A+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt((U&