Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
(function(j8,_M){typeof exports=="object"&&typeof module<"u"?module.exports=_M():typeof define=="function"&&define.amd?define(_M):(j8=typeof globalThis<"u"?globalThis:j8||self,j8.mermaid=_M())})(this,function(){"use strict";function j8(r,s){for(var o=0;o<s.length;o++){const h=s[o];if(typeof h!="string"&&!Array.isArray(h)){for(const g in h)if(g!=="default"&&!(g in r)){const b=Object.getOwnPropertyDescriptor(h,g);b&&Object.defineProperty(r,g,b.get?b:{enumerable:!0,get:()=>h[g]})}}}return Object.freeze(Object.defineProperty(r,Symbol.toStringTag,{value:"Module"}))}function _M(r){for(var s=[],o=1;o<arguments.length;o++)s[o-1]=arguments[o];var h=Array.from(typeof r=="string"?[r]:r);h[h.length-1]=h[h.length-1].replace(/\r?\n([\t ]*)$/,"");var g=h.reduce(function(w,y){var k=y.match(/\n([\t ]+|(?!\s).)/g);return k?w.concat(k.map(function(E){var _,C;return(C=(_=E.match(/[\t ]/g))===null||_===void 0?void 0:_.length)!==null&&C!==void 0?C:0})):w},[]);if(g.length){var b=new RegExp(`