Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
method:"POST",params:{title:c,properties:[{key:"channel",value:Editor.guid()}]}},k,l)};DriveClient.prototype.renameFile=function(f,c,k,l){null!=f&&null!=c&&this.executeRequest(this.createDriveRequest(f,{title:c}),k,l)};DriveClient.prototype.moveFile=function(f,c,k,l){null!=f&&null!=c&&this.executeRequest(this.createDriveRequest(f,{parents:[{kind:"drive#fileLink",id:c}]}),k,l)};DriveClient.prototype.createDriveRequest=function(f,c){return{url:"/files/"+f+"?uploadType=multipart&supportsAllDrives=true",