Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
path:F,id:I};null==G&&null==I&&(G=b.mode==B);G&&N.setAttribute("selected","selected")}n.appendChild(N)}return N}function u(B){b.pickFolder(B,function(F){var I=null;B==App.MODE_GOOGLE&&null!=F.docs&&0<F.docs.length?I={mode:B,path:F.docs[0].name,id:F.docs[0].id}:B==App.MODE_ONEDRIVE&&null!=F.value&&0<F.value.length?I={mode:B,path:F.value[0].name,id:F.value[0].id}:(B==App.MODE_GITHUB||B==App.MODE_GITLAB)&&null!=F&&0<F.length&&(I={mode:B,path:decodeURIComponent(F),id:F});null!=I&&(q.style.display="",
b.addRecent(I,"Folders"),F=l(I.mode,I.path,I.id,!0),F.parentNode.firstChild!=F&&F.parentNode.insertBefore(F,F.parentNode.firstChild))},!0,!0,!0,!0)}function x(){var B=b.getRecent("Folders");if(null!=B&&0<B.length){for(var F=0;F<B.length;F++)l(B[F].mode,B[F].path,B[F].id);q.style.display=""}else q.style.display="none";l(App.MODE_GOOGLE,mxResources.get("myDrive"));l(App.MODE_GOOGLE,null,null,null,null,!0);l(App.MODE_ONEDRIVE,mxResources.get("myFiles"));l(App.MODE_ONEDRIVE,null,null,null,null,!0);null!=