Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
TrelloClient.prototype.insertFile=function(b,e,f,c,k,l){k=null!=k?k:!1;var u=mxUtils.bind(this,function(){var x=mxUtils.bind(this,function(E){this.writeFile(b,E,l,mxUtils.bind(this,function(D){k?f(new TrelloLibrary(this.ui,e,D)):f(new TrelloFile(this.ui,e,D))}),c)});this.ui.useCanvasForExport&&/(\.png)$/i.test(b)?this.ui.getEmbeddedPng(mxUtils.bind(this,function(E){x(this.ui.base64ToBlob(E,"image/png"))}),c,e):x(e)});this.authenticate(u,c)};