Language: JavaScript
Label: safe
CWE: CWE-829 \u2014 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Code:
    calculateDiscount: function(amount, discount=null) {

        if(discount === "" || discount === null || discount === 'null' || discount === 0) {
        
            return parseFloat(Number(amount));

        } else if( typeof discount === 'string' && discount.indexOf("%") > 0 ) {
        
            // For parcantage discount  
            return parseFloat(Number(amount) - (Number(discount.replace("%",""))/100) * Number(amount)); 

        } else {

            // For Fixed Discount
            return parseFloat(Number(amount) - Number(discount));

        }

    },