Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(){Trello.get("search",{query:""==mxUtils.trim(c)?"is:open":c,cards_limit:100,cards_page:g-1},mxUtils.bind(this,function(t){this.ui.spinner.stop();t=null!=t?t.cards:null;if(null==t||0==t.length)mxUtils.write(x,mxResources.get("noFiles"));else{1==g&&(x.appendChild(E(mxResources.get("filterCards")+"...",mxUtils.bind(this,function(){var B=new FilenameDialog(this.ui,c,mxResources.get("ok"),mxUtils.bind(this,function(F){null!=F&&(c=F,d())}),mxResources.get("filterCards"),null,null,"http://help.trello.com/article/808-searching-for-cards-all-boards");
this.ui.showDialog(B.container,300,80,!0,!1);B.init()}))),mxUtils.br(x));for(var v=0;v<t.length;v++)mxUtils.bind(this,function(B){x.appendChild(E(B.name,mxUtils.bind(this,function(){b?(f=B.id,A()):(this.ui.hideDialog(),e(B.id))})))})(t[v]);100==t.length&&(x.appendChild(K),H=function(){x.scrollTop>=x.scrollHeight-x.offsetHeight&&n()},mxEvent.addListener(x,"scroll",H))}}),mxUtils.bind(this,function(t){401==t.status?this.authenticate(q,D,!0):null!=D&&D({message:t.responseText})}))});q()});d()};