Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.updateUser(function(){l(!0)},c,u):k(u)});null==b?this.authenticate(function(){l(!0)},c):l(!1)};DropboxClient.prototype.getLibrary=function(e,f,c){this.getFile(e,f,c,!0)};DropboxClient.prototype.getFile=function(e,f,c,k){k=null!=k?k:!1;var l=/\.png$/i.test(e);if(/^https:\/\//i.test(e)||/\.v(dx|sdx?)$/i.test(e)||/\.gliffy$/i.test(e)||/\.pdf$/i.test(e)||!this.ui.useCanvasForExport&&l){var u=mxUtils.bind(this,function(){var x=e.split("/");this.ui.convertFile(e,0<x.length?x[x.length-1]:e,null,this.extension,
f,c)});null!=b?u():this.authenticate(u,c)}else u={path:"/"+e},null!=urlParams.rev&&(u.rev=urlParams.rev),this.readFile(u,mxUtils.bind(this,function(x,E){var D=null;if(0<(l?x.lastIndexOf(","):-1)){var A=this.ui.extractGraphModelFromPng(x);null!=A&&0<A.length?x=A:D=new LocalFile(this,x,e,!0)}f(null!=D?D:k?new DropboxLibrary(this.ui,x,E):new DropboxFile(this.ui,x,E))}),c,l)};DropboxClient.prototype.readFile=function(e,f,c,k){var l=mxUtils.bind(this,function(x){var E=!0,D=window.setTimeout(mxUtils.bind(this,