majia-guanyuan

No direct malicious actions (exfiltration, credential theft, or network activity) are evident in this module’s chart-rendering logic. The primary security concern is the supply-chain/backdoor-style pattern of executing a dynamically loaded JavaScript text asset at runtime via new Function(__gdHtmlCommon)(). The overall risk therefore depends heavily on the integrity and contents of ./html_common.js and on how GDHTML.lineSvg/stacked safely handle data-derived values when generating SVG/HTML.