Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
path:A,id:G};null==C&&null==G&&(C=b.mode==y);C&&N.setAttribute("selected","selected")}k.appendChild(N)}return N}function z(y){b.pickFolder(y,function(A){var G=null;y==App.MODE_GOOGLE&&null!=A.docs&&0<A.docs.length?G={mode:y,path:A.docs[0].name,id:A.docs[0].id}:y==App.MODE_ONEDRIVE&&null!=A.value&&0<A.value.length?G={mode:y,path:A.value[0].name,id:A.value[0].id}:(y==App.MODE_GITHUB||y==App.MODE_GITLAB)&&null!=A&&0<A.length&&(G={mode:y,path:decodeURIComponent(A),id:A});null!=G&&(n.style.display="",
b.addRecent(G,"Folders"),A=u(G.mode,G.path,G.id,!0),A.parentNode.firstChild!=A&&A.parentNode.insertBefore(A,A.parentNode.firstChild))},!0,!0,!0,!0)}function D(){var y=b.getRecent("Folders");if(null!=y&&0<y.length){for(var A=0;A<y.length;A++)u(y[A].mode,y[A].path,y[A].id);n.style.display=""}else n.style.display="none";u(App.MODE_GOOGLE,mxResources.get("myDrive"));u(App.MODE_GOOGLE,null,null,null,null,!0);u(App.MODE_ONEDRIVE,mxResources.get("myFiles"));u(App.MODE_ONEDRIVE,null,null,null,null,!0);null!=