Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
a.view.getBackgroundPane(),ia=a.view.getDrawPane();a.cumulativeZoomFactor=1;var qa=null,K=null,U=null,L=null,O=null,X=function(W){null!=qa&&window.clearTimeout(qa);0<=W&&window.setTimeout(function(){if(!a.isMouseDown||L)qa=window.setTimeout(mxUtils.bind(this,function(){a.isFastZoomEnabled()&&(null!=a.view.backgroundPageShape&&null!=a.view.backgroundPageShape.node&&(mxUtils.setPrefixedStyle(a.view.backgroundPageShape.node.style,"transform-origin",null),mxUtils.setPrefixedStyle(a.view.backgroundPageShape.node.style,
"transform",null)),ia.style.transformOrigin="",ja.style.transformOrigin="",mxClient.IS_SF?(ia.style.transform="scale(1)",ja.style.transform="scale(1)",window.setTimeout(function(){ia.style.transform="";ja.style.transform=""},0)):(ia.style.transform="",ja.style.transform=""),a.view.getDecoratorPane().style.opacity="",a.view.getOverlayPane().style.opacity="");var J=new mxPoint(a.container.scrollLeft,a.container.scrollTop),ha=mxUtils.getOffset(a.container),oa=a.view.scale,ua=0,ka=0;null!=K&&(ua=a.container.offsetWidth/
2-K.x+ha.x,ka=a.container.offsetHeight/2-K.y+ha.y);a.zoom(a.cumulativeZoomFactor,null,a.isFastZoomEnabled()?20:null);a.view.scale!=oa&&(null!=U&&(ua+=J.x-U.x,ka+=J.y-U.y),null!=b&&e.chromelessResize(!1,null,ua*(a.cumulativeZoomFactor-1),ka*(a.cumulativeZoomFactor-1)),!mxUtils.hasScrollbars(a.container)||0==ua&&0==ka||(a.container.scrollLeft-=ua*(a.cumulativeZoomFactor-1),a.container.scrollTop-=ka*(a.cumulativeZoomFactor-1)));null!=O&&ia.setAttribute("filter",O);a.cumulativeZoomFactor=1;O=L=K=U=qa=
null}),null!=W?W:a.isFastZoomEnabled()?e.wheelZoomDelay:e.lazyZoomDelay)},0)};a.lazyZoom=function(W,J,ha,oa){oa=null!=oa?oa:this.zoomFactor;(J=J||!a.scrollbars)&&(K=new mxPoint(a.container.offsetLeft+a.container.clientWidth/2,a.container.offsetTop+a.container.clientHeight/2));W?.15>=this.view.scale*this.cumulativeZoomFactor?this.cumulativeZoomFactor*=(this.view.scale+.05)/this.view.scale:(this.cumulativeZoomFactor*=oa,this.cumulativeZoomFactor=Math.round(this.view.scale*this.cumulativeZoomFactor*