Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
if(isNaN(S)||isNaN(U))try{var N=G[0].getAttribute("viewBox").split(/\s+/);S=parseFloat(N[2]);U=parseFloat(N[3])}catch(P){S=S||100,U=U||100}n(this.convertDataUri(Editor.createSvgDataUri(I)),S,U)}else null!=t?t():q({message:mxResources.get("invalidInput")})}catch(P){q(P)}});mermaid.mermaidAPI.initialize(g);mermaid.mermaidAPI.render("geMermaidOutput-"+(new Date).getTime(),d).then(function(I){F(I.svg)}).catch(function(I){null!=t?t(I):q(I)})}catch(I){q(I)}});"undefined"!==typeof mermaid||this.loadingMermaid||