Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"4px";oa.style.marginBottom="4px";oa.style.whiteSpace="nowrap";oa.style.overflowX="auto";oa.style.overflowY="hidden";oa.appendChild(ia);oa.appendChild(Ka);fa.appendChild(oa);fa.appendChild(na);return fa}function I(){if(sa&&null!=d)f||b.hideDialog(),d(sa,Ba,p.value);else if(c)f||b.hideDialog(),c(da,p.value,za,aa);else{var fa=p.value;null!=fa&&0<fa.length&&b.pickFolder(b.mode,function(ma){b.createFile(fa,da,null!=aa&&0<aa.length?aa:null,null,function(){b.hideDialog()},null,ma,null,null!=ca&&0<ca.length?
ca:null)},b.mode!=App.MODE_GOOGLE||null==b.stateArg||null==b.stateArg.folderId)}}function G(fa,ma,na,oa,ia,ja,wa){null!=ba&&(ba.style.backgroundColor="transparent",ba.style.border="1px solid transparent");L.removeAttribute("disabled");da=ma;aa=na;ca=ja;ba=fa;sa=oa;za=wa;Ba=ia;ba.style.backgroundColor=x;ba.style.border=E}function S(fa,ma,na,oa,ia,ja,wa,xa,Ka,Ja,Aa){function La(Na,Ya){null==Ma?(Oa=Na,Oa=/^https?:\/\//.test(Oa)&&!b.editor.isCorsEnabledForUrl(Oa)?PROXY_URL+"?url="+encodeURIComponent(Oa):