Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
EditorUi.prototype.restoreViewState=function(b,e,g){b=null!=b?this.getPageById(b.getId()):null;var p=this.editor.graph;null!=b&&null!=this.currentPage&&null!=this.pages&&(b!=this.currentPage?this.selectPage(b,!0,e):(p.setViewState(e),this.editor.updateGraphComponents(),p.view.revalidate(),p.sizeDidChange()),p.container.scrollLeft=p.view.translate.x*p.view.scale+e.scrollLeft,p.container.scrollTop=p.view.translate.y*p.view.scale+e.scrollTop,p.restoreSelection(g))};