Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var SaveDialog=function(b,f,l,d,q,u,z){function D(P,N,H,m,v,A){var I=null;if(null==d||0>mxUtils.indexOf(d,P))if(v=null!=v?v:b.getTitleForService(P),0<=mxUtils.indexOf(G,P)||null!=b.getServiceForName(P)){I=document.createElement("option");if("pick"==A)I.innerHTML=mxUtils.htmlEntities(v)+"&nbsp;&nbsp;&#8211&nbsp;&nbsp;"+mxUtils.htmlEntities(mxResources.get("pickFolder"))+"...",I.setAttribute("value","pickFolder-"+P),I.setAttribute("title",v+" - "+mxResources.get("pickFolder")+"...");else{var g=P+(null!=
H?"-"+H:""),x=R[g];null!=x&&null!=x.option&&x.option.parentNode.removeChild(x.option);x=null;if(null!=N){"/"==N.charAt(N.length-1)&&(N=N.substring(0,N.length-1));"/"==N.charAt(0)&&(N=N.substring(1));x=N;var F=x.lastIndexOf("/");0<=F&&(x=x.substring(F+1));25<x.length&&(x=x.substring(0,25)+"...")}I.innerHTML=(null!=x?mxUtils.htmlEntities(x)+"&nbsp;&nbsp;&#8211&nbsp;&nbsp;":"")+mxUtils.htmlEntities(v);I.setAttribute("title",v+(null!=N?" ("+N+")":"")+(null!=H&&decodeURIComponent(H)!=N?" ["+H+"]":""));
I.setAttribute("value",g);R[g]={option:I,mode:P,path:N,id:H};SaveDialog.lastValue==g?m=!0:null==m&&("root"==A?m=b.mode==P:"pickFolder-"==y.value.substring(0,11)&&(m=!0));m&&I.setAttribute("selected","selected")}y.appendChild(I)}return I}function L(P){b.pickFolder(P,function(N){var H=null;P==App.MODE_GOOGLE&&null!=N.docs&&0<N.docs.length?H={mode:P,path:N.docs[0].name,id:N.docs[0].id}:P==App.MODE_ONEDRIVE&&null!=N.value&&0<N.value.length?H={mode:P,path:N.value[0].name,id:N.value[0].id}:(P==App.MODE_GITHUB||