Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var StorageDialog=function(b,e,f){function c(K,H,d,g,n,q){function t(){mxEvent.addListener(v,"click",null!=q?q:function(){d==App.MODE_GOOGLE&&b.spinner.spin(document.body,mxResources.get("authorizing"))?b.drive.checkToken(mxUtils.bind(this,function(){b.spinner.stop();b.setMode(d,!0);e()})):d==App.MODE_ONEDRIVE&&b.spinner.spin(document.body,mxResources.get("authorizing"))?b.oneDrive.checkToken(mxUtils.bind(this,function(){b.spinner.stop();b.setMode(d,!0);e()}),function(S){b.spinner.stop();b.handleError(S)}):
(b.setMode(d,!0),e())})}x++;++u>f&&(mxUtils.br(E),u=1);var v=document.createElement("a");v.style.overflow="hidden";v.style.display="inline-block";v.className="geBaseButton";v.style.boxSizing="border-box";v.style.fontSize="11px";v.style.position="relative";v.style.margin="4px";v.style.marginTop="8px";v.style.marginBottom="0px";v.style.padding="8px 10px 8px 10px";v.style.width="88px";v.style.height="100px";v.style.whiteSpace="nowrap";v.setAttribute("title",H);var B=document.createElement("div");B.style.textOverflow=