Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(e,f,c,k,l,u,x,E,D){u.length>=this.maxFileSize?D({message:mxResources.get("drawingTooLarge")+" ("+this.ui.formatFileSize(u.length)+" / 1 MB)"}):(c={path:k,branch:decodeURIComponent(c),message:l,content:u},null!=x&&(c.sha=x),e=new mxXmlRequest(this.baseUrl+"/repos/"+e+"/"+f+"/contents/"+k,JSON.stringify(c),"PUT"),this.executeRequest(e,mxUtils.bind(this,function(A){E(A)}),mxUtils.bind(this,function(A){404==A.code&&(A.helpLink=this.baseHostUrl+"/settings/connections/applications/"+this.clientId,
A.code=null);D(A)})))};GitHubClient.prototype.checkExists=function(e,f,c){var k=e.split("/"),l=k[0],u=k[1],x=k[2];e=k.slice(3,k.length).join("/");this.getSha(l,u,e,x,mxUtils.bind(this,function(E){if(f){var D=this.ui.spinner.pause();this.ui.confirm(mxResources.get("replaceIt",[e]),function(){D();c(!0,E)},function(){D();c(!1)})}else this.ui.spinner.stop(),this.ui.showError(mxResources.get("error"),mxResources.get("fileExists"),mxResources.get("ok"),function(){c(!1)})}),mxUtils.bind(this,function(E){c(!0)}),