Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
f.desc.modifiedDate+"-size_"+f.getSize()+"-mime_"+f.desc.mimeType+(this.ui.editor.autosave?"":"-nosave")+(f.isAutosave()?"":"-noauto")+(f.changeListenerEnabled?"":"-nolisten")+(f.inConflictState?"-conflict":"")+(f.invalidChecksum?"-invalid":""),label:(null!=this.user?"user_"+this.user.id:"nouser")+(null!=f.sync?"-client_"+f.sync.clientId:"-nosync")})}catch(ca){}}else"1"==urlParams.test&&Y.headRevisionId==t&&EditorUi.debug("DriveClient: Remote Etag Changed","local",z,"remote",Y.etag,"rev",f.desc.headRevisionId,
"response",[Y],"file",[f]),H(Z,Y)}catch(ca){d(ca)}}),mxUtils.bind(this,function(){H(Z)})):H(Z)}catch(Y){d(Y)}}}))}catch(Z){d(Z)}}),O=mxUtils.bind(this,function(W){f.saveLevel=9;if(W||null==z)J(W);else{var V=!0,Q=null;try{Q=window.setTimeout(mxUtils.bind(this,function(){V=!1;H({code:App.ERROR_TIMEOUT})}),3*this.ui.timeout)}catch(X){}this.executeRequest({url:"/files/"+f.getId()+"?supportsAllDrives=true&fields="+this.catchupFields},mxUtils.bind(this,function(X){window.clearTimeout(Q);if(V){f.saveLevel=