Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function E(){if("reset"==n.value)b.resetRecent("Folders"),n.innerHTML="",v={},x();else if("pickFolder-"==n.value.substring(0,11)){var B=n.value.substring(11);n.value=B;u(B)}else if(null!=b.editor.diagramFileTypes&&"drawio"==b.editor.diagramFileTypes[g.value].extension){B=b.getExtensionForService(v[n.value].mode);var F=d.value;null!=B&&0>e.indexOf(".")&&0>F.indexOf(".")&&(d.value=F+B)}}c=null!=c?c:!0;k=null!=k?k:!0;var D=document.createElement("div");D.style.whiteSpace="nowrap";var A=document.createElement("div");