Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var BtnDialog=function(b,e,f,c){var k=document.createElement("div");k.style.textAlign="center";var l=document.createElement("p");l.style.fontSize="16pt";l.style.padding="0px";l.style.margin="0px";l.style.color="gray";mxUtils.write(l,mxResources.get("done"));var u="Unknown",x=document.createElement("img");x.setAttribute("border","0");x.setAttribute("align","absmiddle");x.style.marginRight="10px";e==b.drive?(u=mxResources.get("googleDrive"),x.src=IMAGE_PATH+"/google-drive-logo-white.svg"):e==b.dropbox?
(u=mxResources.get("dropbox"),x.src=IMAGE_PATH+"/dropbox-logo-white.svg"):e==b.oneDrive?(u=mxResources.get("oneDrive"),x.src=IMAGE_PATH+"/onedrive-logo-white.svg"):e==b.gitHub?(u=mxResources.get("github"),x.src=IMAGE_PATH+"/github-logo-white.svg"):e==b.gitLab?(u=mxResources.get("gitlab"),x.src=IMAGE_PATH+"/gitlab-logo.svg"):e==b.trello&&(u=mxResources.get("trello"),x.src=IMAGE_PATH+"/trello-logo-white.svg");b=document.createElement("p");mxUtils.write(b,mxResources.get("authorizedIn",[u],"You are now authorized in {1}"));
f=mxUtils.button(f,c);f.insertBefore(x,f.firstChild);f.style.marginTop="6px";f.className="geBigButton";f.style.fontSize="18px";f.style.padding="14px";k.appendChild(l);k.appendChild(b);k.appendChild(f);this.container=k},FontDialog=function(b,e,f,c,k){function l(B){this.style.border="";13==B.keyCode&&v.click()}var u=document.createElement("table"),x=document.createElement("tbody");u.style.marginTop="8px";var E=document.createElement("tr");var D=document.createElement("td");D.colSpan=2;D.style.whiteSpace=