Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
urlParams.dev?mxscript("js/diagramly/Extensions.js",function(){mxscript("js/orgchart/bridge.min.js",function(){mxscript("js/orgchart/bridge.collections.min.js",function(){mxscript("js/orgchart/OrgChart.Layout.min.js",function(){mxscript("js/orgchart/mxOrgChartLayout.js",B,null,null,null,v)},null,null,null,v)},null,null,null,v)},null,null,null,v)},null,null,null,v):mxscript("js/extensions.min.js",B,null,null,null,v))}),q)};EditorUi.prototype.createMermaidXml=function(d,g,n,q,t){var v=new Graph(document.createElement("div"));
n=v.insertVertex(null,null,null,0,0,q,t,"shape=image;noLabel=1;verticalAlign=top;imageAspect=1;image="+n+";");v.setAttributeForCell(n,"mermaidData",JSON.stringify({data:d,config:g},null,2));d=(new mxCodec).encode(v.getModel());return mxUtils.getXml(d)};EditorUi.prototype.generateOpenAiMermaidDiagram=function(d,g,n){var q=0,t=mxUtils.bind(this,function(){this.spinner.spin(document.body,mxResources.get("loading"))&&this.createTimeout(4E4,mxUtils.bind(this,function(v){EditorUi.logEvent({category:"OPENAI-DIAGRAM",