Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
b.editor.cancelFirst||A.appendChild(K);D.appendChild(A);this.init=function(){Editor.selectFilename(d)};this.container=D},CreateDialog=function(b,e,f,c,k,l,u,x,E,D,A,K,H,d,g,n,q){function t(N,P,R,M){function p(){mxEvent.addListener(y,"click",function(){var J=R;if(u){var O=F.value,T=O.lastIndexOf(".");if(0>e.lastIndexOf(".")&&0>T){J=null!=J?J:U.value;var W="";J==App.MODE_GOOGLE?W=b.drive.extension:J==App.MODE_GITHUB?W=b.gitHub.extension:J==App.MODE_GITLAB?W=b.gitLab.extension:J==App.MODE_TRELLO?W=b.trello.extension:
J==App.MODE_DROPBOX?W=b.dropbox.extension:J==App.MODE_ONEDRIVE?W=b.oneDrive.extension:J==App.MODE_DEVICE&&(W=".drawio");0<=T&&(O=O.substring(0,T));F.value=O+W}}v(R)})}var y=document.createElement("a");y.style.overflow="hidden";var C=document.createElement("img");C.src=N;C.setAttribute("border","0");C.setAttribute("align","absmiddle");C.style.width="60px";C.style.height="60px";C.style.paddingBottom="6px";y.style.display="inline-block";y.className="geBaseButton";y.style.position="relative";y.style.margin=