Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
App.prototype.pickFolder=function(b,f,m,d,u){m=null!=m?m:!0;var v=this.spinner.pause();m&&b==App.MODE_GOOGLE&&null!=this.drive?this.drive.pickFolder(mxUtils.bind(this,function(E){v();if(E.action==google.picker.Action.PICKED){var F=null;null!=E.docs&&0<E.docs.length&&"folder"==E.docs[0].type&&(F=E.docs[0].id);f(F)}}),u):m&&b==App.MODE_ONEDRIVE&&null!=this.oneDrive?this.oneDrive.pickFolder(mxUtils.bind(this,function(E){v();null!=E&&null!=E.value&&0<E.value.length&&(E=OneDriveFile.prototype.getIdOf(E.value[0]),
f(E))}),d):m&&b==App.MODE_GITHUB&&null!=this.gitHub?this.gitHub.pickFolder(mxUtils.bind(this,function(E){v();f(E)})):m&&b==App.MODE_GITLAB&&null!=this.gitLab?this.gitLab.pickFolder(mxUtils.bind(this,function(E){v();f(E)})):m&&b==App.MODE_TRELLO&&null!=this.trello?this.trello.pickFolder(mxUtils.bind(this,function(E){v();f(E)})):EditorUi.prototype.pickFolder.apply(this,arguments)};