Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N({message:mxResources.get("error")+" "+pa.getStatus()})},qa,this.timeout,function(){U&&null!=N&&N({code:App.ERROR_TIMEOUT,retry:ra})},ka)});ra()}catch(pa){null!=N&&N(pa)}};Editor.prototype.absoluteCssFonts=function(l){var B=null;if(null!=l){var N=l.split("url(");if(0<N.length){B=[N[0]];l=window.location.pathname;var Z=null!=l?l.lastIndexOf("/"):-1;0<=Z&&(l=l.substring(0,Z+1));Z=document.getElementsByTagName("base");var U=null;null!=Z&&0<Z.length&&(U=Z[0].getAttribute("href"));for(var aa=1;aa<N.length;aa++)if(Z=
N[aa].indexOf(")"),0<Z){var Y=Editor.trimCssUrl(N[aa].substring(0,Z));this.graph.isRelativeUrl(Y)&&(Y=null!=U?U+Y:window.location.protocol+"//"+window.location.hostname+("/"==Y.charAt(0)?"":l)+Y);B.push('url("'+Y+'"'+N[aa].substring(Z))}else B.push(N[aa])}else B=[l]}return null!=B?B.join(""):null};Editor.prototype.mapFontUrl=function(l,B,N){/^https?:\/\//.test(B)&&!this.isCorsEnabledForUrl(B)&&(B=PROXY_URL+"?url="+encodeURIComponent(B));N(l,B)};Editor.prototype.embedCssFonts=function(l,B){var N=l.split("url("),