Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
if(isNaN(V)||isNaN(S))try{var N=C[0].getAttribute("viewBox").split(/\s+/);V=parseFloat(N[2]);S=parseFloat(N[3])}catch(O){V=V||100,S=S||100}k(this.convertDataUri(Editor.createSvgDataUri(G)),V,S)}else null!=p?p():n({message:mxResources.get("invalidInput")})}catch(O){n(O)}});mermaid.mermaidAPI.initialize(e);mermaid.mermaidAPI.render("geMermaidOutput-"+(new Date).getTime(),c).then(function(G){A(G.svg)}).catch(function(G){null!=p?p(G):n(G)})}catch(G){n(G)}});"undefined"!==typeof mermaid||this.loadingMermaid||