Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
c.error.data[0].reason)||404==G.code||404==G.status)){S="#U"==S.substring(0,2)?S.substring(45,S.lastIndexOf("%26ex")):S.substring(2);this.showError(e,y,mxResources.get("openInNewWindow"),mxUtils.bind(this,function(){this.editor.graph.openLink("https://drive.google.com/open?id="+S);this.handleError(c,e,k,n,p)}),V,mxResources.get("changeUser"),mxUtils.bind(this,function(){function O(){v.innerText="";for(var B=0;B<Q.length;B++){var H=document.createElement("option");mxUtils.write(H,Q[B].displayName);
H.value=B;v.appendChild(H);H=document.createElement("option");H.innerHTML="&nbsp;&nbsp;&nbsp;";mxUtils.write(H,"<"+Q[B].email+">");H.setAttribute("disabled","disabled");v.appendChild(H)}H=document.createElement("option");mxUtils.write(H,mxResources.get("addAccount"));H.value=Q.length;v.appendChild(H)}var Q=this.drive.getUsersList(),J=document.createElement("div"),m=document.createElement("span");m.style.marginTop="6px";mxUtils.write(m,mxResources.get("changeUser")+": ");J.appendChild(m);var v=document.createElement("select");