Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
null==this.cachedGoogleFonts[S]?(O++,this.loadUrl(S,mxUtils.bind(this,function(X){this.cachedGoogleFonts[S]=X;J.push(X+"\n");O--;T()}),mxUtils.bind(this,function(X){O--;J.push("@import url("+S+");\n");T()}))):J.push(this.cachedGoogleFonts[S]+"\n"):J.push('@font-face {font-family: "'+V+'";src: url("'+S+'")}\n')})(z[W].name,z[W].url);T()}else l()};Editor.prototype.addMathCss=function(l){l=l.getElementsByTagName("defs");if(null!=l&&0<l.length)for(var z=document.getElementsByTagName("style"),J=0;J<z.length;J++){var O=
mxUtils.getTextContent(z[J]);0>O.indexOf("mxPageSelector")&&0<O.indexOf("MathJax")&&l[0].appendChild(z[J].cloneNode(!0))}};Editor.prototype.addFontCss=function(l,z){z=null!=z?z:this.absoluteCssFonts(this.fontCss);if(null!=z){var J=l.getElementsByTagName("defs"),O=l.ownerDocument;0==J.length?(J=null!=O.createElementNS?O.createElementNS(mxConstants.NS_SVG,"defs"):O.createElement("defs"),null!=l.firstChild?l.insertBefore(J,l.firstChild):l.appendChild(J)):J=J[0];l=null!=O.createElementNS?O.createElementNS(mxConstants.NS_SVG,