Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
"error"!=H[0].getAttribute("aria-roledescription")){var ka=parseFloat(H[0].getAttribute("width")),fa=parseFloat(H[0].getAttribute("height"));if(isNaN(ka)||isNaN(fa))try{var ca=H[0].getAttribute("viewBox").split(/\s+/);ka=parseFloat(ca[2]);fa=parseFloat(ca[3])}catch(ja){ka=ka||100,fa=fa||100}k(this.convertDataUri(Editor.createSvgDataUri(O)),ka,fa)}else null!=z?z():u({message:mxResources.get("invalidInput")})}catch(ja){u(ja)}});mermaid.mermaidAPI.initialize(f);mermaid.mermaidAPI.render("geMermaidOutput-"+