Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
this.container.scrollTop+=Math.round((N.y-U)*this.view.scale);this.autoTranslate=!1;return}}ca.apply(this,arguments)}else this.fireEvent(new mxEventObject(mxEvent.SIZE,"bounds",this.getGraphBounds()))}}}var ja=b.view.getBackgroundPane(),ma=b.view.getDrawPane();b.cumulativeZoomFactor=1;var aa=null,S=null,da=null,P=null,V=null,l=function(A){null!=aa&&window.clearTimeout(aa);0<=A&&window.setTimeout(function(){if(!b.isMouseDown||P)aa=window.setTimeout(mxUtils.bind(this,function(){b.isFastZoomEnabled()&&
(null!=b.view.backgroundPageShape&&null!=b.view.backgroundPageShape.node&&(mxUtils.setPrefixedStyle(b.view.backgroundPageShape.node.style,"transform-origin",null),mxUtils.setPrefixedStyle(b.view.backgroundPageShape.node.style,"transform",null)),ma.style.transformOrigin="",ja.style.transformOrigin="",mxClient.IS_SF?(ma.style.transform="scale(1)",ja.style.transform="scale(1)",window.setTimeout(function(){ma.style.transform="";ja.style.transform=""},0)):(ma.style.transform="",ja.style.transform=""),
b.view.getDecoratorPane().style.opacity="",b.view.getOverlayPane().style.opacity="");var N=new mxPoint(b.container.scrollLeft,b.container.scrollTop),X=mxUtils.getOffset(b.container),U=b.view.scale,Z=0,ba=0;null!=S&&(Z=b.container.offsetWidth/2-S.x+X.x,ba=b.container.offsetHeight/2-S.y+X.y);b.zoom(b.cumulativeZoomFactor,null,b.isFastZoomEnabled()?20:null);b.view.scale!=U&&(null!=da&&(Z+=N.x-da.x,ba+=N.y-da.y),null!=e&&g.chromelessResize(!1,null,Z*(b.cumulativeZoomFactor-1),ba*(b.cumulativeZoomFactor-
1)),!mxUtils.hasScrollbars(b.container)||0==Z&&0==ba||(b.container.scrollLeft-=Z*(b.cumulativeZoomFactor-1),b.container.scrollTop-=ba*(b.cumulativeZoomFactor-1)));null!=V&&ma.setAttribute("filter",V);b.cumulativeZoomFactor=1;V=P=S=da=aa=null}),null!=A?A:b.isFastZoomEnabled()?g.wheelZoomDelay:g.lazyZoomDelay)},0)};b.lazyZoom=function(A,N,X,U){U=null!=U?U:this.zoomFactor;(N=N||!b.scrollbars)&&(S=new mxPoint(b.container.offsetLeft+b.container.clientWidth/2,b.container.offsetTop+b.container.clientHeight/