Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
EditorUi.prototype.setPageVisible=function(b){var e=this.editor.graph,g=mxUtils.hasScrollbars(e.container),p=0,y=0;g&&(p=e.view.translate.x*e.view.scale-e.container.scrollLeft,y=e.view.translate.y*e.view.scale-e.container.scrollTop);e.pageVisible=b;e.pageBreaksVisible=b;e.preferPageSize=b;e.view.validateBackground();if(g){var q=e.getSelectionCells();e.clearSelection();e.setSelectionCells(q)}e.sizeDidChange();g&&(e.container.scrollLeft=e.view.translate.x*e.view.scale-p,e.container.scrollTop=e.view.translate.y*
e.view.scale-y);e.defaultPageVisible=b;this.fireEvent(new mxEventObject("pageViewChanged"))};