Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
g=null!=g?g:DRAW_MATH_URL+"/startup.js";Editor.mathJaxQueue=[];var M=null;Editor.doMathJaxRender=function(W){try{null==M?(MathJax.typesetClear([W]),MathJax.typeset([W]),F()):M!=W&&Editor.mathJaxQueue.push(W)}catch(U){MathJax.typesetClear([W]),null!=U.retry?(M=W,U.retry.then(function(){MathJax.typesetPromise([W]).then(F)["catch"](function(X){console.log("Error in MathJax.typesetPromise: "+X.toString());F()})})["catch"](function(X){console.log("Error in MathJax.retry: "+X.toString());F()})):null!=window.console&&
console.log("Error in MathJax.typeset: "+U.toString())}};window.MathJax=null!=x?x:{options:{skipHtmlTags:{"[+]":["text"]}},loader:{load:["html"==urlParams["math-output"]?"output/chtml":"output/svg","input/tex","input/asciimath","ui/safe"]},startup:{pageReady:function(){for(var W=0;W<Editor.mathJaxQueue.length;W++)Editor.doMathJaxRender(Editor.mathJaxQueue[W])}}};Editor.MathJaxRender=function(W){"undefined"!==typeof MathJax&&"function"===typeof MathJax.typeset?Editor.doMathJaxRender(W):Editor.mathJaxQueue.push(W)};