Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
va,La.width*va,La.height*va))}return ya};var Ha=ja.getGlobalVariable;ja.getGlobalVariable=function(ya){return"page"==ya?ka.getName():"pagenumber"==ya?ia+1:"pagecount"==ya?null!=g.pages?g.pages.length:1:Ha.apply(this,arguments)};document.body.appendChild(ja.container);g.updatePageRoot(ka);ja.model.setRoot(ka.root)}ma=Ka(ja,ma,ia!=la,ka.getId());ja!=Q&&ja.container.parentNode.removeChild(ja.container)}}else ma=Ka(Q);null==ma||null==ma.wnd?g.handleError({message:mxResources.get("errorUpdatingPreview")}):
(ma.mathEnabled&&(la=ma.wnd.document,Ta&&(ma.wnd.IMMEDIATE_PRINT=!0),la.writeln('<script type="text/javascript" src="'+DRAWIO_BASE_URL+'/js/math-print.js">\x3c/script>')),ma.closeDocument(),Graph.rewritePageLinks(ma.wnd.document),!ma.mathEnabled&&Ta&&PrintDialog.printPreview(ma));null!=Ia&&(Q.shapeForegroundColor=Va,Q.shapeBackgroundColor=Ua,Q.stylesheet=Ia,Q.refresh())}}var Q=g.editor.graph,S=document.createElement("div"),W=document.createElement("h3");W.style.width="100%";W.style.textAlign="center";