Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.getDefaultTranslate=function(b){var e=this.getPagePadding(),g=this.getPageSize();return new mxPoint(e.x-b.x*g.width,e.y-b.y*g.height)};Graph.prototype.updateMinimumSize=function(){var b=this.getPageLayout(),e=this.getPagePadding(),g=this.getPageSize(),p=Math.ceil(2*e.x+b.width*g.width);b=Math.ceil(2*e.y+b.height*g.height);if(null==this.minimumGraphSize||this.minimumGraphSize.width!=p||this.minimumGraphSize.height!=b)this.minimumGraphSize=new mxRectangle(0,0,p,b)};