Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
`+i,p.parser);const m=Oe().securityLevel;let b;m==="sandbox"&&(b=Mr("#i"+a));const C=Mr(m==="sandbox"?b.nodes()[0].contentDocument.body:"body").select("#"+a);C.append("g");const D=p.db.getMindmap(),N=C.append("g");N.attr("class","mindmap-edges");const B=C.append("g");B.attr("class","mindmap-nodes"),vjt(B,D,-1,v);const j=await pUe(D,v);gUe(N,j),bUe(j),J9(void 0,C,v.mindmap.padding,v.mindmap.useMaxWidth),Editor.mermaidToDrawio(j,"Mindmap")}},wUe=i=>{let a="";for(let f=0;f<i.THEME_COLOR_LIMIT;f++)i["lineColor"+f]=i["lineColor"+f]||i["cScaleInv"+f],Q9(i["lineColor"+f])?i["lineColor"+f]=Ds(i["lineColor"+f],20):i["lineColor"+f]=ta(i["lineColor"+f],20);for(let f=0;f<i.THEME_COLOR_LIMIT;f++){const p=""+(17-3*f);a+=`
    .section-${f-1} rect, .section-${f-1} path, .section-${f-1} circle, .section-${f-1} polygon, .section-${f-1} path  {
      fill: ${i["cScale"+f]};
    }
    .section-${f-1} text {
     fill: ${i["cScaleLabel"+f]};
    }
    .node-icon-${f-1} {
      font-size: 40px;
      color: ${i["cScaleLabel"+f]};
    }
    .section-edge-${f-1}{
      stroke: ${i["cScale"+f]};
    }
    .edge-depth-${f-1}{
      stroke-width: ${p};
    }
    .section-${f-1} line {
      stroke: ${i["cScaleInv"+f]} ;
      stroke-width: 3;
    }

    .disabled, .disabled circle, .disabled text {
      fill: lightgray;
    }
    .disabled text {
      fill: #efefef;
    }
    `}return a},mUe=Object.freeze(Object.defineProperty({__proto__:null,diagram:{db:tUe,renderer:vUe,parser:VGe,styles:i=>`