Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
DriveClient.prototype.authorize=function(f,c,k,m,u){this.isExtAuth&&!f?window.parent.driveAuth(mxUtils.bind(this,function(v){this.updateAuthInfo(v,!0,!0,c,k)}),k):(new mxXmlRequest(this.redirectUri+"?getState=1",null,"GET")).send(mxUtils.bind(this,function(v){200<=v.getStatus()&&299>=v.getStatus()?this.authorizeStep2(v.getText(),f,c,k,m,u):null!=k&&k(v)}),k)};DriveClient.prototype.updateAuthInfo=function(f,c,k,m,u){b=f.access_token;delete f.access_token;f.expires=Date.now()+1E3*parseInt(f.expires_in);