Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!0),ja,1),M=b.getDefaultTranslate(C);this.x0=C.x;this.y0=C.y;b.setScrollbarPositions(g.currentPage.viewState,M.x,M.y);if(M.x!=this.translate.x||M.y!=this.translate.y){this.setTranslate(M.x,M.y);return}}C=b.getPagePadding();M=b.getPageSize();this.translate.x=C.x-(this.x0||0)*M.width;this.translate.y=C.y-(this.y0||0)*M.height}G.apply(this,arguments)};if(!b.isViewer()){var ca=b.sizeDidChange;b.sizeDidChange=function(){if(null!=this.container&&mxUtils.hasScrollbars(this.container)){this.updateMinimumSize();
if(!this.autoTranslate){var C=this.getPageLayout(),M=this.getDefaultTranslate(C),ba=this.view.translate.x,V=this.view.translate.y;if(M.x!=ba||M.y!=V){this.view.x0=C.x;this.view.y0=C.y;this.autoTranslate=!0;this.view.setTranslate(M.x,M.y);this.container.scrollLeft+=Math.round((M.x-ba)*this.view.scale);this.container.scrollTop+=Math.round((M.y-V)*this.view.scale);this.autoTranslate=!1;return}}ca.apply(this,arguments)}else this.fireEvent(new mxEventObject(mxEvent.SIZE,"bounds",this.getGraphBounds()))}}}var ia=