Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Y+"')";break;default:null==S?C=[{driveId:V}]:C.push({name:Z,driveId:V,folderId:S}),qa=(V?"/drives/"+V:"/me/drive")+(S?"/items/"+S:"/root")+"/children"}ba||(qa+=(0<qa.indexOf("?")?"&":"?")+"select=id,name,description,parentReference,file,createdBy,lastModifiedBy,lastModifiedDateTime,size,folder,remoteItem,@microsoft.graph.downloadUrl");var la=[];ca()}}function I(V){T.className=T.className.replace("odCatSelected","");T=V;T.className+=" odCatSelected"}function F(V){y||(W=null,G("search",null,null,null,
V))}var U="";null==e&&(e=t,U='<div style="text-align: center;" class="odPreview"></div>');null==k&&(k=function(){var V=null;try{V=JSON.parse(localStorage.getItem("mxODPickerRecentList"))}catch(S){}return V});null==m&&(m=function(V){if(null!=V){var S=k()||{};delete V["@microsoft.graph.downloadUrl"];S[V.id]=V;localStorage.setItem("mxODPickerRecentList",JSON.stringify(S))}});U='<div class="odCatsList"><div class="odCatsListLbl">OneDrive</div><div id="odFiles" class="odCatListTitle odCatSelected">'+mxUtils.htmlEntities(mxResources.get("files"))+