Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
method:"POST",params:{title:c,properties:[{key:"channel",value:Editor.guid()}]}},k,l)};DriveClient.prototype.renameFile=function(f,c,k,l){null!=f&&null!=c&&this.executeRequest(this.createDriveRequest(f,{title:c}),k,l)};DriveClient.prototype.moveFile=function(f,c,k,l){null!=f&&null!=c&&this.executeRequest(this.createDriveRequest(f,{parents:[{kind:"drive#fileLink",id:c}]}),k,l)};DriveClient.prototype.createDriveRequest=function(f,c){return{url:"/files/"+f+"?uploadType=multipart&supportsAllDrives=true",
method:"PUT",contentType:"application/json; charset=UTF-8",params:c}};DriveClient.prototype.getLibrary=function(f,c,k){return this.getFile(f,c,k,!0,!0)};DriveClient.prototype.loadDescriptor=function(f,c,k,l){this.executeRequest({url:"/files/"+f+"?supportsAllDrives=true&fields="+(null!=l?l:this.allFields)},c,k)};DriveClient.prototype.listFiles=function(f,c,k,l,u){this.executeRequest({url:"/files?supportsAllDrives=true&includeItemsFromAllDrives=true&q="+encodeURIComponent("(mimeType contains '"+this.xmlMimeType+