Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
fa:null)},b.mode!=App.MODE_GOOGLE||null==b.stateArg||null==b.stateArg.folderId)}}function C(da,la,ma,oa,ia,ja,va){null!=aa&&(aa.style.backgroundColor="transparent",aa.style.border="1px solid transparent");H.removeAttribute("disabled");ca=la;ba=ma;fa=ja;aa=da;ra=oa;za=va;Ba=ia;aa.style.backgroundColor=D;aa.style.border=L}function V(da,la,ma,oa,ia,ja,va,wa,Ja,Ha,ya){function La(Na,Ya){null==Ma?(Oa=Na,Oa=/^https?:\/\//.test(Oa)&&!b.editor.isCorsEnabledForUrl(Oa)?PROXY_URL+"?url="+encodeURIComponent(Oa):
TEMPLATE_PATH+"/"+Oa,mxUtils.get(Oa,mxUtils.bind(this,function(Wa){200<=Wa.getStatus()&&299>=Wa.getStatus()&&(Ma=Wa.getText());Ya(Ma,Oa)}))):Ya(Ma,Oa)}function Ca(Na,Ya){if(null==da||x||b.sidebar.currentElt==ua)b.sidebar.hideTooltip();else if(b.sidebar.hideTooltip(),null!=F){var Wa="<mxfile><diagram>"+Graph.compress('<mxGraphModel><root><mxCell id="0"/><mxCell id="1" parent="0"/><mxCell id="2" value="" style="shape=image;image='+F.src+';imageAspect=1;" parent="1" vertex="1"><mxGeometry width="'+F.naturalWidth+