Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
message:this.getErrorMessage(e,mxResources.get("error")+" "+e.getStatus())})}),mxUtils.bind(this,function(H){window.clearTimeout(A);D&&c(H)}))}),x=mxUtils.bind(this,function(E){null==this.user?this.updateUser(function(){x(!0)},c,E):u(E)});null==b?this.authenticate(function(){x(!0)},c):x(!1)};GitHubClient.prototype.getLibrary=function(e,f,c){this.getFile(e,f,c,!0)};GitHubClient.prototype.getSha=function(e,f,c,k,l,u,x){var E="&t="+(new Date).getTime();e=new mxXmlRequest(this.baseUrl+"/repos/"+e+"/"+
f+"/contents/"+c+"?ref="+k+E,null,"HEAD");this.executeRequest(e,mxUtils.bind(this,function(D){try{l(D.request.getResponseHeader("Etag").match(/"([^"]+)"/)[1])}catch(A){u(A)}}),u,null,x)};GitHubClient.prototype.getFile=function(e,f,c,k,l){k=null!=k?k:!1;var u=e.split("/"),x=u[0],E=u[1],D=u[2];e=u.slice(3,u.length).join("/");u=/\.png$/i.test(e);if(!l&&(/\.v(dx|sdx?)$/i.test(e)||/\.gliffy$/i.test(e)||/\.pdf$/i.test(e)||!this.ui.useCanvasForExport&&u))if(null!=b){l=this.baseUrl+"/repos/"+x+"/"+E+"/contents/"+