Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
b.container.scrollLeft)<O&&Math.abs(this.scrollTop-b.container.scrollTop)<O&&Math.abs(this.startX-N.getGraphX())<O&&Math.abs(this.startY-N.getGraphY())<O&&(0<parseFloat(g.chromelessToolbar.style.opacity||0)?k():u(30))}})}this.editor.editable||this.addChromelessClickHandler()}else if(this.editor.extendCanvas){var H=b.view.validate,ka=new mxPoint,fa=null;b.view.validate=function(){if(null!=b.container&&mxUtils.hasScrollbars(b.container)){if(null!=g.currentPage&&fa!=g.currentPage){fa=g.currentPage;var A=
b.getBoundingBoxFromGeometry(b.model.getCells(),!0);null==A&&(A=new mxRectangle(b.view.translate.x*b.view.scale,b.view.translate.y*b.view.scale));A=b.getPageLayout(A,ka,1);var N=b.getDefaultTranslate(A);this.x0=A.x;this.y0=A.y;if(N.x!=this.translate.x||N.y!=this.translate.y)this.invalidate(),this.translate.x=N.x,this.translate.y=N.y}N=b.getPagePadding();var X=b.getPageSize();A=N.x-(this.x0||0)*X.width;N=N.y-(this.y0||0)*X.height;if(this.translate.x!=A||this.translate.y!=N)this.invalidate(),this.translate.x=
A,this.translate.y=N}H.apply(this,arguments)};if(!b.isViewer()){var ca=b.sizeDidChange;b.sizeDidChange=function(){if(null!=this.container&&mxUtils.hasScrollbars(this.container)){this.updateMinimumSize();if(!this.autoTranslate){var A=this.getPageLayout(),N=this.getDefaultTranslate(A),X=this.view.translate.x,U=this.view.translate.y;if(N.x!=X||N.y!=U){this.view.x0=A.x;this.view.y0=A.y;this.autoTranslate=!0;this.view.setTranslate(N.x,N.y);this.container.scrollLeft+=Math.round((N.x-X)*this.view.scale);