Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=T.ownerSVGElement&&(T=T.ownerSVGElement);var F=this.gridSize*this.view.scale*this.view.gridSteps;F=-Math.round(F-mxUtils.mod(this.view.translate.x*this.view.scale+E,F))+"px "+-Math.round(F-mxUtils.mod(this.view.translate.y*this.view.scale+N,F))+"px";T.style.backgroundPosition=F}};mxGraph.prototype.updatePageBreaks=function(E,N,T){var F=this.view.scale,K=this.view.translate,R=this.pageFormat,W=F*this.pageScale,d=this.view.getBackgroundPageBounds();N=d.width;T=d.height;var f=new mxRectangle(F*
K.x,F*K.y,R.width*W,R.height*W),k=(E=E&&Math.min(f.width,f.height)>this.minPageBreakDist)?Math.ceil(T/f.height)-1:0,v=E?Math.ceil(N/f.width)-1:0,z=d.x+N,A=d.y+T;null==this.horizontalPageBreaks&&0<k&&(this.horizontalPageBreaks=[]);null==this.verticalPageBreaks&&0<v&&(this.verticalPageBreaks=[]);E=mxUtils.bind(this,function(H){if(null!=H){for(var J=H==this.horizontalPageBreaks?k:v,O=0;O<=J;O++){var G=H==this.horizontalPageBreaks?[new mxPoint(Math.round(d.x),Math.round(d.y+(O+1)*f.height)),new mxPoint(Math.round(z),
Math.round(d.y+(O+1)*f.height))]:[new mxPoint(Math.round(d.x+(O+1)*f.width),Math.round(d.y)),new mxPoint(Math.round(d.x+(O+1)*f.width),Math.round(A))];null!=H[O]?(H[O].points=G,H[O].redraw()):(G=new mxPolyline(G,this.pageBreakColor),G.dialect=this.dialect,G.isDashed=this.pageBreakDashed,G.pointerEvents=!1,G.init(this.view.backgroundPane),G.redraw(),H[O]=G)}for(O=J;O<H.length;O++)null!=H[O]&&H[O].destroy();H.splice(J,H.length-J)}});E(this.horizontalPageBreaks);E(this.verticalPageBreaks)};var e=mxGraphHandler.prototype.shouldRemoveCellsFromParent;