Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"unknown");null!=S&&null!=S.error&&null!=S.error.code&&(U+="-code_"+S.error.code);EditorUi.logEvent({category:"ERROR-SAVE-FILE-"+f.getHash()+"-rev_"+f.desc.headRevisionId+"-mod_"+f.desc.modifiedDate+"-size_"+f.getSize()+"-mime_"+f.desc.mimeType+(this.ui.editor.autosave?"":"-nosave")+(f.isAutosave()?"":"-noauto")+(f.changeListenerEnabled?"":"-nolisten")+(f.inConflictState?"-conflict":"")+(f.invalidChecksum?"-invalid":""),action:U,label:(null!=this.user?"user_"+this.user.id:"nouser")+(null!=f.sync?
"-client_"+f.sync.clientId:"-nosync")})}}catch(N){}}),d=mxUtils.bind(this,function(S){H(S);try{EditorUi.logError(S.message,null,null,null,S)}catch(U){}});if(f.isEditable()&&null!=f.desc){var g=(new Date).getTime(),n=f.desc.etag,q=f.desc.modifiedDate,t=f.desc.headRevisionId,v=this.ui.useCanvasForExport&&/(\.png)$/i.test(f.getTitle());x=null!=x?x:!1;var B=null,F=!1,I={mimeType:f.desc.mimeType,title:f.getTitle()};if(this.isGoogleRealtimeMimeType(I.mimeType))I.mimeType=this.xmlMimeType,B=f.desc,F=c=!0;