Language: JavaScript
Label: safe
CWE: CWE-829 \u2014 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Code:
    calculateTarifCharges: function(amount, discount = null) {
        
        if(discount === "" || discount === null || discount === 'null' || discount === 0) {

            return 0.00;

        } else if (typeof discount === 'string' && discount.indexOf("%") > 0) {

            // For parcantage discount  
            return ((Number(discount.replace("%", "")) / 100) * Number(amount)).toFixed(2);

        } else {

            // For Fixed Discount
            return (Number(discount)).toFixed(2);

        }

    },