Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
(EditorUi.prototype.showRemoteCursors=l.showRemoteCursors);null!=l.restrictExport&&(DrawioFile.RESTRICT_EXPORT=l.restrictExport)}};Editor.isAutoDarkMode=function(l){return!l&&"auto"==urlParams.dark||Editor.isSettingsEnabled()&&"auto"==mxSettings.settings.darkMode};Editor.isSettingsEnabled=function(){return"undefined"!==typeof window.mxSettings&&(isLocalStorage||mxClient.IS_CHROMEAPP)};Editor.configureFontCss=function(l){if(null!=l){Editor.prototype.fontCss=l;var B=document.getElementsByTagName("script")[0];
if(null!=B&&null!=B.parentNode){var N=document.createElement("style");N.setAttribute("type","text/css");N.appendChild(document.createTextNode(l));B.parentNode.insertBefore(N,B);l=l.split("url(");for(N=1;N<l.length;N++){var Z=l[N].indexOf(")");Z=Editor.trimCssUrl(l[N].substring(0,Z));var U=document.createElement("link");U.setAttribute("rel","preload");U.setAttribute("href",Z);U.setAttribute("as","font");U.setAttribute("crossorigin","");B.parentNode.insertBefore(U,B)}}}};Editor.trimCssUrl=function(l){return l.replace(RegExp("^[\\s\"']+",