Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
return V};EditorUi.prototype.getXmlFileData=function(c,e,k,n){c=null!=c?c:!0;e=null!=e?e:!1;k=null!=k?k:!Editor.defaultCompressed;var p=this.editor.getGraphXml(c,n);if(c&&null!=this.fileNode&&null!=this.currentPage)if(c=function(G){var C=G.getElementsByTagName("mxGraphModel");C=0<C.length?C[0]:null;null==C&&k?(C=mxUtils.trim(mxUtils.getTextContent(G)),G=G.cloneNode(!1),0<C.length&&(C=Graph.decompress(C),null!=C&&0<C.length&&G.appendChild(mxUtils.parseXml(C).documentElement))):null==C||k?G=G.cloneNode(!0):
(G=G.cloneNode(!1),mxUtils.setTextContent(G,Graph.compressNode(C)));p.appendChild(G)},EditorUi.removeChildNodes(this.currentPage.node),mxUtils.setTextContent(this.currentPage.node,Graph.compressNode(p)),p=this.fileNode.cloneNode(!1),e)c(this.currentPage.node);else for(e=0;e<this.pages.length;e++){var t=this.pages[e],y=t.node;if(t!=this.currentPage)if(t.needsUpdate){var A=new mxCodec(mxUtils.createXmlDocument());A=A.encode(new mxGraphModel(t.root));this.editor.graph.saveViewState(t.viewState,A,null,