Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=window.console&&console.error(ha,Q)}});/(\.v(dx|sdx?))($|\?)/i.test(Q.name)||/(\.vs(x|sx?))($|\?)/i.test(Q.name)?t(null,Q.type,g+V*m,n+V*m,240,160,Q.name,function(Z){T(V,function(){return Z})},Q):"image"==Q.type.substring(0,5)||"application/pdf"==Q.type?X.readAsDataURL(Q):X.readAsText(Q)}})(W)});if(M){M=[];for(y=0;y<d.length;y++)M.push(d[y]);d=M;this.confirmImageResize(function(L){R=L;C()},I)}else C()};EditorUi.prototype.isBlankFile=function(){return null!=this.pages&&1==this.pages.length&&
this.isDiagramEmpty()&&this.currentPage.getName()==mxResources.get("pageWithNumber",[1])};EditorUi.prototype.confirmImageResize=function(d,g){g=null!=g?g:!1;var n=null!=this.spinner&&null!=this.spinner.pause?this.spinner.pause():function(){},q=isLocalStorage||mxClient.IS_CHROMEAPP?mxSettings.getResizeImages():null,t=function(v,B){if(v||g)mxSettings.setResizeImages(v?B:null),mxSettings.save();n();d(B)};null==q||g?this.showDialog((new ConfirmDialog(this,mxResources.get("resizeLargeImages"),function(v){t(v,