Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
20*(X-1),U=-1),b.lazyZoom(N,null,U,X),mxEvent.consume(A),!1;ba=ba.parentNode}}),b.container);b.panningHandler.zoomGraph=function(A){b.cumulativeZoomFactor=A.scale;b.lazyZoom(0<A.scale,!0);mxEvent.consume(A)}};EditorUi.prototype.addChromelessToolbarItems=function(b){b(mxUtils.bind(this,function(e){this.actions.get("print").funct();mxEvent.consume(e)}),Editor.printImage,mxResources.get("print"))};EditorUi.prototype.isPagesEnabled=function(){return this.editor.editable||"1"!=urlParams["hide-pages"]};