Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=ua&&null!=ua.originalSrc&&(ua=l.createImageForPageLink(ua.originalSrc,ka));ja.background=xa;ja.backgroundImage=null!=ua?new mxImage(ua.src,ua.width,ua.height,ua.x,ua.y):null;ja.pageVisible=fa;ja.mathEnabled=oa;var Ka=ja.getGraphBounds;ja.getGraphBounds=function(){var Aa=Ka.apply(this,arguments),La=this.backgroundImage;if(null!=La&&null!=La.width&&null!=La.height){var Da=this.view.translate,wa=this.view.scale;Aa=mxRectangle.fromRectangle(Aa);Aa.add(new mxRectangle((Da.x+La.x)*wa,(Da.y+La.y)*
wa,La.width*wa,La.height*wa))}return Aa};var Ja=ja.getGlobalVariable;ja.getGlobalVariable=function(Aa){return"page"==Aa?ka.getName():"pagenumber"==Aa?ia+1:"pagecount"==Aa?null!=l.pages?l.pages.length:1:Ja.apply(this,arguments)};document.body.appendChild(ja.container);l.updatePageRoot(ka);ja.model.setRoot(ka.root)}na=Ha(ja,na,ia!=ma,ka.getId());ja!=T&&ja.container.parentNode.removeChild(ja.container)}}else na=Ha(T);null==na||null==na.wnd?l.handleError({message:mxResources.get("errorUpdatingPreview")}):