Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
if(isNaN(U)||isNaN(R))try{var N=F[0].getAttribute("viewBox").split(/\s+/);U=parseFloat(N[2]);R=parseFloat(N[3])}catch(Q){U=U||100,R=R||100}n(this.convertDataUri(Editor.createSvgDataUri(I)),U,R)}else null!=t?t():q({message:mxResources.get("invalidInput")})}catch(Q){q(Q)}});mermaid.mermaidAPI.initialize(g);mermaid.mermaidAPI.render("geMermaidOutput-"+(new Date).getTime(),d).then(function(I){G(I.svg)}).catch(function(I){null!=t?t(I):q(I)})}catch(I){q(I)}});"undefined"!==typeof mermaid||this.loadingMermaid||