Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
DriveClient.prototype.authorize=function(f,c,k,m,u){this.isExtAuth&&!f?window.parent.driveAuth(mxUtils.bind(this,function(v){this.updateAuthInfo(v,!0,!0,c,k)}),k):(new mxXmlRequest(this.redirectUri+"?getState=1",null,"GET")).send(mxUtils.bind(this,function(v){200<=v.getStatus()&&299>=v.getStatus()?this.authorizeStep2(v.getText(),f,c,k,m,u):null!=k&&k(v)}),k)};DriveClient.prototype.updateAuthInfo=function(f,c,k,m,u){b=f.access_token;delete f.access_token;f.expires=Date.now()+1E3*parseInt(f.expires_in);
f.remember=c;this.resetTokenRefresh(f);this.authCalled=!0;if(k||null==this.user){var v=JSON.stringify(f);this.updateUser(mxUtils.bind(this,function(){var E=JSON.parse(v);this.setPersistentToken(E,!c);null!=m&&m()}),u)}else null!=m&&(this.setPersistentToken(f,!c),m())};DriveClient.prototype.authorizeStep2=function(f,c,k,m,u,v){try{null!=this.ui.stateArg&&null!=this.ui.stateArg.userId&&(this.userId=this.ui.stateArg.userId,null!=this.user&&this.user.id!=this.userId&&(this.user=null));if(null==this.userId){var E=