Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
!1;try{var g=JSON.parse(e.getText());null!=g&&"Resource not accessible by integration"==g.message?H():(null!=g&&null!=g.errors&&0<g.errors.length&&(d="too_large"==g.errors[0].code),c({message:mxResources.get(d?"drawingTooLarge":"forbidden")}))}catch(n){c({message:mxResources.get(d?"drawingTooLarge":"forbidden")})}}else 404===e.getStatus()?l?c({code:e.getStatus(),message:this.getErrorMessage(e,mxResources.get("fileNotFound"))}):H():409===e.getStatus()?c({code:e.getStatus(),status:409}):c({code:e.getStatus(),
message:this.getErrorMessage(e,mxResources.get("error")+" "+e.getStatus())})}),mxUtils.bind(this,function(H){window.clearTimeout(A);D&&c(H)}))}),x=mxUtils.bind(this,function(E){null==this.user?this.updateUser(function(){x(!0)},c,E):u(E)});null==b?this.authenticate(function(){x(!0)},c):x(!1)};GitHubClient.prototype.getLibrary=function(e,f,c){this.getFile(e,f,c,!0)};GitHubClient.prototype.getSha=function(e,f,c,k,l,u,x){var E="&t="+(new Date).getTime();e=new mxXmlRequest(this.baseUrl+"/repos/"+e+"/"+