Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
m=null!=m?m:DRAW_MATH_URL+"/startup.js";Editor.mathJaxQueue=[];var O=null;Editor.doMathJaxRender=function(V){try{null==O?(MathJax.typesetClear([V]),MathJax.typeset([V]),J()):O!=V&&Editor.mathJaxQueue.push(V)}catch(Q){MathJax.typesetClear([V]),null!=Q.retry?(O=V,Q.retry.then(function(){MathJax.typesetPromise([V]).then(J)["catch"](function(X){console.log("Error in MathJax.typesetPromise: "+X.toString());J()})})["catch"](function(X){console.log("Error in MathJax.retry: "+X.toString());J()})):null!=window.console&&
console.log("Error in MathJax.typeset: "+Q.toString())}};window.MathJax=null!=z?z:{options:{skipHtmlTags:{"[+]":["text"]}},loader:{load:["html"==urlParams["math-output"]?"output/chtml":"output/svg","input/tex","input/asciimath","ui/safe"]},startup:{pageReady:function(){for(var V=0;V<Editor.mathJaxQueue.length;V++)Editor.doMathJaxRender(Editor.mathJaxQueue[V])}}};Editor.MathJaxRender=function(V){"undefined"!==typeof MathJax&&"function"===typeof MathJax.typeset?Editor.doMathJaxRender(V):Editor.mathJaxQueue.push(V)};