Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
d.error.data[0].reason)||404==I.code||404==I.status)){U="#U"==U.substring(0,2)?U.substring(45,U.lastIndexOf("%26ex")):U.substring(2);this.showError(g,B,mxResources.get("openInNewWindow"),mxUtils.bind(this,function(){this.editor.graph.openLink("https://drive.google.com/open?id="+U);this.handleError(d,g,n,q,t)}),S,mxResources.get("changeUser"),mxUtils.bind(this,function(){function P(){y.innerText="";for(var C=0;C<R.length;C++){var L=document.createElement("option");mxUtils.write(L,R[C].displayName);
L.value=C;y.appendChild(L);L=document.createElement("option");L.innerHTML="&nbsp;&nbsp;&nbsp;";mxUtils.write(L,"<"+R[C].email+">");L.setAttribute("disabled","disabled");y.appendChild(L)}L=document.createElement("option");mxUtils.write(L,mxResources.get("addAccount"));L.value=R.length;y.appendChild(L)}var R=this.drive.getUsersList(),M=document.createElement("div"),p=document.createElement("span");p.style.marginTop="6px";mxUtils.write(p,mxResources.get("changeUser")+": ");M.appendChild(p);var y=document.createElement("select");