Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
[];for(var A in Graph.customFontElements){var O=Graph.customFontElements[A];l.push({name:O.name,url:O.url})}return l};Graph.prototype.setFont=function(l,A){Graph.addFont(l,A);document.execCommand("fontname",!1,l);if(null!=A){var O=this.cellEditor.textarea.getElementsByTagName("font");A=Graph.getFontUrl(l,A);for(var X=0;X<O.length;X++)O[X].getAttribute("face")==l&&O[X].getAttribute("data-font-src")!=A&&O[X].setAttribute("data-font-src",A)}};var B=Graph.prototype.isFastZoomEnabled;Graph.prototype.isFastZoomEnabled=