Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
DriveFile.prototype.getComments=function(b,e){function f(k,m,u){if(m.deleted)return null;u=new DriveComment(k,m.commentId||m.replyId,m.content,m.modifiedDate,m.createdDate,"resolved"==m.status,m.author.isAuthenticatedUser?c:new DrawioUser(m.author.permissionId,m.author.emailAddress,m.author.displayName,m.author.picture.url),u);for(var v=0;null!=m.replies&&v<m.replies.length;v++)u.addReplyDirect(f(k,m.replies[v],m.commentId));return u}var c=this.ui.getCurrentUser();this.ui.drive.executeRequest({url:"/files/"+