Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){b.spinner.stop();d(null);b.showError(mxResources.get("error"),mxResources.get("fileNotFound"),mxResources.get("ok"))}):(b.hideDialog(),d(y,null,null,I,c,e)):(y=b.convertDataUri(y),A=null==A?120:A,G=null==G?100:G,b.hideDialog(),d(y,A,G,I,c,e))},n=function(y,A){if(null!=y){var G=q?null:K.getModel().getGeometry(K.getSelectionCell());null!=G?k(y,G.width,G.height,A):k(y,null,null,A)}else b.hideDialog(),d(null)};this.init=function(){R.focus();if(Graph.fileSupport){R.setAttribute("placeholder",