Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
App.prototype.showAuthDialog=function(b,e,f,c){var k=this.spinner.pause();this.showDialog((new AuthDialog(this,b,e,mxUtils.bind(this,function(l){try{null!=f&&f(l,mxUtils.bind(this,function(){this.hideDialog();k()}))}catch(u){this.editor.setStatus(mxUtils.htmlEntities(u.message))}}))).container,300,e?180:140,!0,!0,mxUtils.bind(this,function(l){null!=c&&c(l);l&&null==this.getCurrentFile()&&null==this.dialog&&this.showSplash()}))};