Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
A,this.translate.y=N}H.apply(this,arguments)};if(!b.isViewer()){var ca=b.sizeDidChange;b.sizeDidChange=function(){if(null!=this.container&&mxUtils.hasScrollbars(this.container)){this.updateMinimumSize();if(!this.autoTranslate){var A=this.getPageLayout(),N=this.getDefaultTranslate(A),X=this.view.translate.x,U=this.view.translate.y;if(N.x!=X||N.y!=U){this.view.x0=A.x;this.view.y0=A.y;this.autoTranslate=!0;this.view.setTranslate(N.x,N.y);this.container.scrollLeft+=Math.round((N.x-X)*this.view.scale);
this.container.scrollTop+=Math.round((N.y-U)*this.view.scale);this.autoTranslate=!1;return}}ca.apply(this,arguments)}else this.fireEvent(new mxEventObject(mxEvent.SIZE,"bounds",this.getGraphBounds()))}}}var ja=b.view.getBackgroundPane(),ma=b.view.getDrawPane();b.cumulativeZoomFactor=1;var aa=null,S=null,da=null,P=null,V=null,l=function(A){null!=aa&&window.clearTimeout(aa);0<=A&&window.setTimeout(function(){if(!b.isMouseDown||P)aa=window.setTimeout(mxUtils.bind(this,function(){b.isFastZoomEnabled()&&