Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
mxResources.get("loading")))for(var x=c.length,F=x,M=[],Q=mxUtils.bind(this,function(W,T){M[W]=T;if(0==--F){this.spinner.stop();if(null!=C)C(M);else{var X=[];I.getModel().beginUpdate();try{for(W=0;W<M.length;W++){var Z=M[W]();null!=Z&&(X=X.concat(Z))}}finally{I.getModel().endUpdate()}}t(X)}}),S=0;S<x;S++)mxUtils.bind(this,function(W){var T=c[W];if(null!=T){var X=new FileReader;X.onload=mxUtils.bind(this,function(Z){if(null==y||y(T))try{if("image/"==T.type.substring(0,6))if("image/svg"==T.type.substring(0,