Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
b.editor.cancelFirst||E.appendChild(R);K.appendChild(E);this.init=function(){Editor.selectFilename(c)};this.container=K},CreateDialog=function(b,f,l,d,q,u,z,D,L,K,E,R,I,c,e,k,n){function p(N,O,Q,J){function m(){mxEvent.addListener(v,"click",function(){var F=Q;if(z){var M=A.value,P=M.lastIndexOf(".");if(0>f.lastIndexOf(".")&&0>P){F=null!=F?F:S.value;var T="";F==App.MODE_GOOGLE?T=b.drive.extension:F==App.MODE_GITHUB?T=b.gitHub.extension:F==App.MODE_GITLAB?T=b.gitLab.extension:F==App.MODE_TRELLO?T=b.trello.extension:
F==App.MODE_DROPBOX?T=b.dropbox.extension:F==App.MODE_ONEDRIVE?T=b.oneDrive.extension:F==App.MODE_DEVICE&&(T=".drawio");0<=P&&(M=M.substring(0,P));A.value=M+T}}t(Q)})}var v=document.createElement("a");v.style.overflow="hidden";var B=document.createElement("img");B.src=N;B.setAttribute("border","0");B.setAttribute("align","absmiddle");B.style.width="60px";B.style.height="60px";B.style.paddingBottom="6px";v.style.display="inline-block";v.className="geBaseButton";v.style.position="relative";v.style.margin=