Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"response",[Y],"file",[f]),H(Z,Y)}catch(ca){d(ca)}}),mxUtils.bind(this,function(){H(Z)})):H(Z)}catch(Y){d(Y)}}}))}catch(Z){d(Z)}}),O=mxUtils.bind(this,function(W){f.saveLevel=9;if(W||null==z)J(W);else{var V=!0,Q=null;try{Q=window.setTimeout(mxUtils.bind(this,function(){V=!1;H({code:App.ERROR_TIMEOUT})}),3*this.ui.timeout)}catch(X){}this.executeRequest({url:"/files/"+f.getId()+"?supportsAllDrives=true&fields="+this.catchupFields},mxUtils.bind(this,function(X){window.clearTimeout(Q);if(V){f.saveLevel=
10;try{null!=X&&X.headRevisionId==t?("1"==urlParams.test&&z!=X.etag&&EditorUi.debug("DriveClient: Preflight Etag Update","from",z,"to",X.etag,"rev",f.desc.headRevisionId,"response",[X],"file",[f]),z=X.etag,J(W)):H({error:{code:412}},X)}catch(Z){d(Z)}}}),mxUtils.bind(this,function(X){window.clearTimeout(Q);V&&(f.saveLevel=11,H(X))}))}});if(v&&null==S){f.saveLevel=8;var T=new Image;T.onload=mxUtils.bind(this,function(){try{var W=this.thumbnailWidth/T.width,V=document.createElement("canvas");V.width=