Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
App.prototype.pickFolder=function(b,e,f,c,k,l){f=null!=f?f:!0;var u=this.spinner.pause();f&&b==App.MODE_GOOGLE&&null!=this.drive?this.drive.pickFolder(mxUtils.bind(this,function(x){u();if(x.action==google.picker.Action.PICKED){var E=null;null!=x.docs&&0<x.docs.length&&"folder"==x.docs[0].type&&(E=x.docs[0].id);e(l?x:E)}}),k):f&&b==App.MODE_ONEDRIVE&&null!=this.oneDrive?this.oneDrive.pickFolder(mxUtils.bind(this,function(x){u();if(null!=x&&null!=x.value&&0<x.value.length){var E=OneDriveFile.prototype.getIdOf(x.value[0]);
e(l?x:E)}}),c):f&&b==App.MODE_GITHUB&&null!=this.gitHub?this.gitHub.pickFolder(mxUtils.bind(this,function(x){u();e(x)})):f&&b==App.MODE_GITLAB&&null!=this.gitLab?this.gitLab.pickFolder(mxUtils.bind(this,function(x){u();e(x)})):f&&b==App.MODE_TRELLO&&null!=this.trello?this.trello.pickFolder(mxUtils.bind(this,function(x){u();e(x)})):EditorUi.prototype.pickFolder.apply(this,arguments)};