Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
DriveFile.prototype.saveFile=function(b,e,f,c,k,l){try{this.isEditable()?this.savingFile||(this.savingFileTime=new Date,this.setShadowModified(!1),this.savingFile=!0,this.createSecret(mxUtils.bind(this,function(u,x){var E=mxUtils.bind(this,function(D,A){try{var K=this.desc;null!=this.sync&&this.sync.fileSaving();this.ui.drive.saveFile(this,A,mxUtils.bind(this,function(H,d,g,n){try{this.savingFile=!1,0!=H?(this.setModified(this.getShadowModified()),e&&(this.lastAutosaveRevision=(new Date).getTime()),
this.autosaveDelay=Math.round(Math.min(1E4,Math.max(DriveFile.prototype.autosaveDelay,this.saveDelay))),this.desc=H,null==x&&Editor.enableRealtimeCache?null!=f&&f(H):this.fileSaved(d,K,mxUtils.bind(this,function(){this.contentChanged();null!=f&&f(H)}),c,x,g,n)):null!=c&&c(H)}catch(q){if(this.savingFile=!1,null!=c)c(q);else throw q;}}),mxUtils.bind(this,function(H,d){try{this.savingFile=!1,this.isConflict(H)?(this.inConflictState=!0,null!=this.sync?(this.savingFile=!0,this.sync.fileConflict(d,mxUtils.bind(this,
function(){window.setTimeout(mxUtils.bind(this,function(){this.updateFileData();this.setShadowModified(!1);E(D,!0)}),100+500*Math.random())}),mxUtils.bind(this,function(){this.savingFile=!1;null!=c&&c()}))):null!=c&&c()):null!=c&&c(H)}catch(g){if(this.savingFile=!1,null!=c)c(g);else throw g;}}),k,k,D,null,u)}catch(H){if(this.savingFile=!1,null!=c)c(H);else throw H;}});E(l,e)}))):null!=f&&f()}catch(u){if(null!=c)c(u);else throw u;}};