Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
!0),aa,1),J=a.getDefaultTranslate(W);this.x0=W.x;this.y0=W.y;a.setScrollbarPositions(e.currentPage.viewState,J.x,J.y);if(J.x!=this.translate.x||J.y!=this.translate.y){this.setTranslate(J.x,J.y);return}}W=a.getPagePadding();J=a.getPageSize();this.translate.x=W.x-(this.x0||0)*J.width;this.translate.y=W.y-(this.y0||0)*J.height}V.apply(this,arguments)};if(!a.isViewer()){var da=a.sizeDidChange;a.sizeDidChange=function(){if(null!=this.container&&mxUtils.hasScrollbars(this.container)){this.updateMinimumSize();
if(!this.autoTranslate){var W=this.getPageLayout(),J=this.getDefaultTranslate(W),ha=this.view.translate.x,oa=this.view.translate.y;if(J.x!=ha||J.y!=oa){this.view.x0=W.x;this.view.y0=W.y;this.autoTranslate=!0;this.view.setTranslate(J.x,J.y);this.container.scrollLeft+=Math.round((J.x-ha)*this.view.scale);this.container.scrollTop+=Math.round((J.y-oa)*this.view.scale);this.autoTranslate=!1;return}}da.apply(this,arguments)}else this.fireEvent(new mxEventObject(mxEvent.SIZE,"bounds",this.getGraphBounds()))}}}var ja=