Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
var SaveDialog=function(b,e,f,c,k,m,u){function v(Q,P,M,p,y,C){var K=null;if(null==c||0>mxUtils.indexOf(c,Q))if(y=null!=y?y:b.getTitleForService(Q),0<=mxUtils.indexOf(I,Q)||null!=b.getServiceForName(Q)){K=document.createElement("option");if("pick"==C)K.innerHTML=mxUtils.htmlEntities(y)+"&nbsp;&nbsp;&#8211&nbsp;&nbsp;"+mxUtils.htmlEntities(mxResources.get("pickFolder"))+"...",K.setAttribute("value","pickFolder-"+Q),K.setAttribute("title",y+" - "+mxResources.get("pickFolder")+"...");else{var l=Q+(null!=
M?"-"+M:""),z=R[l];null!=z&&null!=z.option&&z.option.parentNode.removeChild(z.option);z=null;if(null!=P){"/"==P.charAt(P.length-1)&&(P=P.substring(0,P.length-1));"/"==P.charAt(0)&&(P=P.substring(1));z=P;var J=z.lastIndexOf("/");0<=J&&(z=z.substring(J+1));25<z.length&&(z=z.substring(0,25)+"...")}K.innerHTML=(null!=z?mxUtils.htmlEntities(z)+"&nbsp;&nbsp;&#8211&nbsp;&nbsp;":"")+mxUtils.htmlEntities(y);K.setAttribute("title",y+(null!=P?" ("+P+")":"")+(null!=M&&decodeURIComponent(M)!=P?" ["+M+"]":""));
K.setAttribute("value",l);R[l]={option:K,mode:Q,path:P,id:M};SaveDialog.lastValue==l?p=!0:null==p&&("root"==C?p=b.mode==Q:"pickFolder-"==B.value.substring(0,11)&&(p=!0));p&&K.setAttribute("selected","selected")}B.appendChild(K)}return K}function E(Q){b.pickFolder(Q,function(P){var M=null;Q==App.MODE_GOOGLE&&null!=P.docs&&0<P.docs.length?M={mode:Q,path:P.docs[0].name,id:P.docs[0].id}:Q==App.MODE_ONEDRIVE&&null!=P.value&&0<P.value.length?M={mode:Q,path:P.value[0].name,id:P.value[0].id}:(Q==App.MODE_GITHUB||