Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
return S};EditorUi.prototype.getXmlFileData=function(d,g,n,q){d=null!=d?d:!0;g=null!=g?g:!1;n=null!=n?n:!Editor.defaultCompressed;var t=this.editor.getGraphXml(d,q);if(d&&null!=this.fileNode&&null!=this.currentPage)if(d=function(I){var G=I.getElementsByTagName("mxGraphModel");G=0<G.length?G[0]:null;null==G&&n?(G=mxUtils.trim(mxUtils.getTextContent(I)),I=I.cloneNode(!1),0<G.length&&(G=Graph.decompress(G),null!=G&&0<G.length&&I.appendChild(mxUtils.parseXml(G).documentElement))):null==G||n?I=I.cloneNode(!0):
(I=I.cloneNode(!1),mxUtils.setTextContent(I,Graph.compressNode(G)));t.appendChild(I)},EditorUi.removeChildNodes(this.currentPage.node),mxUtils.setTextContent(this.currentPage.node,Graph.compressNode(t)),t=this.fileNode.cloneNode(!1),g)d(this.currentPage.node);else for(g=0;g<this.pages.length;g++){var v=this.pages[g],B=v.node;if(v!=this.currentPage)if(v.needsUpdate){var F=new mxCodec(mxUtils.createXmlDocument());F=F.encode(new mxGraphModel(v.root));this.editor.graph.saveViewState(v.viewState,F,null,