Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
S;var O=g(".odPreview"),T=g("#odFiles");b=function(V,Q){Q=Q||document;return Q.querySelectorAll(V)}(".odCatListTitle");for(S=0;S<b.length;S++)b[S].addEventListener("click",function(){M=m=null;if(!y)switch(I(this),this.id){case "odFiles":F();break;case "odRecent":F("recent");break;case "odShared":F("shared");break;case "odSharepoint":F("sharepoint")}});var W=null;g("#odSearchBox").addEventListener("keyup",function(V){var Q=this;null!=W&&clearTimeout(W);13==V.keyCode?G(Q.value):W=setTimeout(function(){G(Q.value)},