Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
ca:null)},b.mode!=App.MODE_GOOGLE||null==b.stateArg||null==b.stateArg.folderId)}}function G(fa,ma,na,oa,ia,ja,wa){null!=ba&&(ba.style.backgroundColor="transparent",ba.style.border="1px solid transparent");L.removeAttribute("disabled");da=ma;aa=na;ca=ja;ba=fa;sa=oa;za=wa;Ba=ia;ba.style.backgroundColor=x;ba.style.border=E}function S(fa,ma,na,oa,ia,ja,wa,xa,Ka,Ja,Aa){function La(Na,Ya){null==Ma?(Oa=Na,Oa=/^https?:\/\//.test(Oa)&&!b.editor.isCorsEnabledForUrl(Oa)?PROXY_URL+"?url="+encodeURIComponent(Oa):
TEMPLATE_PATH+"/"+Oa,mxUtils.get(Oa,mxUtils.bind(this,function(Wa){200<=Wa.getStatus()&&299>=Wa.getStatus()&&(Ma=Wa.getText());Ya(Ma,Oa)}))):Ya(Ma,Oa)}function Da(Na,Ya){if(null==fa||z||b.sidebar.currentElt==va)b.sidebar.hideTooltip();else if(b.sidebar.hideTooltip(),null!=J){var Wa="<mxfile><diagram>"+Graph.compress('<mxGraphModel><root><mxCell id="0"/><mxCell id="1" parent="0"/><mxCell id="2" value="" style="shape=image;image='+J.src+';imageAspect=1;" parent="1" vertex="1"><mxGeometry width="'+J.naturalWidth+