Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null!=T.ownerSVGElement&&(T=T.ownerSVGElement);var G=this.gridSize*this.view.scale*this.view.gridSteps;G=-Math.round(G-mxUtils.mod(this.view.translate.x*this.view.scale+E,G))+"px "+-Math.round(G-mxUtils.mod(this.view.translate.y*this.view.scale+L,G))+"px";T.style.backgroundPosition=G}};mxGraph.prototype.updatePageBreaks=function(E,L,T){var G=this.view.scale,M=this.view.translate,R=this.pageFormat,W=G*this.pageScale,d=this.view.getBackgroundPageBounds();L=d.width;T=d.height;var f=new mxRectangle(G*
M.x,G*M.y,R.width*W,R.height*W),k=(E=E&&Math.min(f.width,f.height)>this.minPageBreakDist)?Math.ceil(T/f.height)-1:0,u=E?Math.ceil(L/f.width)-1:0,z=d.x+L,C=d.y+T;null==this.horizontalPageBreaks&&0<k&&(this.horizontalPageBreaks=[]);null==this.verticalPageBreaks&&0<u&&(this.verticalPageBreaks=[]);E=mxUtils.bind(this,function(F){if(null!=F){for(var K=F==this.horizontalPageBreaks?k:u,O=0;O<=K;O++){var H=F==this.horizontalPageBreaks?[new mxPoint(Math.round(d.x),Math.round(d.y+(O+1)*f.height)),new mxPoint(Math.round(z),
Math.round(d.y+(O+1)*f.height))]:[new mxPoint(Math.round(d.x+(O+1)*f.width),Math.round(d.y)),new mxPoint(Math.round(d.x+(O+1)*f.width),Math.round(C))];null!=F[O]?(F[O].points=H,F[O].redraw()):(H=new mxPolyline(H,this.pageBreakColor),H.dialect=this.dialect,H.isDashed=this.pageBreakDashed,H.pointerEvents=!1,H.init(this.view.backgroundPane),H.redraw(),F[O]=H)}for(O=K;O<F.length;O++)null!=F[O]&&F[O].destroy();F.splice(K,F.length-K)}});E(this.horizontalPageBreaks);E(this.verticalPageBreaks)};var e=mxGraphHandler.prototype.shouldRemoveCellsFromParent;