Language: JavaScript
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
null!=N||0!=this.graphConfig.resize||""==b.style.height?(N=null!=N?N:new mxPoint,this.graph.view.setTranslate(Math.floor(this.graph.border-e.x/this.graph.view.scale)+N.x,Math.floor(this.graph.border-e.y/this.graph.view.scale)+N.y),y=b.offsetWidth):this.graph.center((!this.widthIsEmpty||e.width<this.minWidth)&&1!=this.graphConfig.resize);b.style.minWidth=T});8==document.documentMode?window.setTimeout(E,0):E();this.positionGraph=function(N){e=this.graph.getGraphBounds();y=null;E(N)}};