Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"odauth",["width=525,height=525","top="+(window.screenY+Math.max(window.outerHeight-525,0)/2),"left="+(window.screenX+Math.max(window.outerWidth-525,0)/2),"status=no,resizable=yes,toolbar=no,menubar=no,scrollbars=yes"].join());null!=A&&(window.onOneDriveCallback=mxUtils.bind(this,function(K,H){if(u){window.onOneDriveCallback=null;u=!1;try{null==K?c({message:mxResources.get("accessDenied"),retry:l}):(null!=D&&D(),this.updateAuthInfo(K,E,!0,f,c))}catch(d){c(d)}finally{null!=H&&H.close()}}else null!=
H&&H.close()}),A.focus())}),mxUtils.bind(this,function(){u&&(window.onOneDriveCallback=null,u=!1,c({message:mxResources.get("accessDenied"),retry:l}))}))});l()}else c({code:App.ERROR_BUSY})};OneDriveClient.prototype.getAccountTypeAndEndpoint=function(e,f){this.get(this.baseUrl+"/me/drive/root",mxUtils.bind(this,function(c){try{if(200<=c.getStatus()&&299>=c.getStatus()){var k=JSON.parse(c.getText());0<k.webUrl.indexOf(".sharepoint.com")?this.endpointHint=k.webUrl.replace("/Documents","/_layouts/15/onedrive.aspx"):