Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
A,O){/^https?:\/\//.test(A)&&!this.isCorsEnabledForUrl(A)&&(A=PROXY_URL+"?url="+encodeURIComponent(A));O(l,A)};Editor.prototype.embedCssFonts=function(l,A){var O=l.split("url("),X=0;null==this.cachedFonts&&(this.cachedFonts={});var U=mxUtils.bind(this,function(){if(0==X){for(var qa=[O[0]],ra=1;ra<O.length;ra++){var pa=O[ra].indexOf(")");qa.push('url("');qa.push(this.cachedFonts[Editor.trimCssUrl(O[ra].substring(0,pa))]);qa.push('"'+O[ra].substring(pa))}A(qa.join(""))}});if(0<O.length){for(l=1;l<O.length;l++){var aa=
O[l].indexOf(")"),ba=null,ia=O[l].indexOf("format(",aa);0<ia&&(ba=Editor.trimCssUrl(O[l].substring(ia+7,O[l].indexOf(")",ia))));mxUtils.bind(this,function(qa){if(null==this.cachedFonts[qa]){this.cachedFonts[qa]=qa;X++;var ra="application/x-font-ttf";if("svg"==ba||/(\.svg)($|\?)/i.test(qa))ra="image/svg+xml";else if("otf"==ba||"embedded-opentype"==ba||/(\.otf)($|\?)/i.test(qa))ra="application/x-font-opentype";else if("woff"==ba||/(\.woff)($|\?)/i.test(qa))ra="application/font-woff";else if("woff2"==
ba||/(\.woff2)($|\?)/i.test(qa))ra="application/font-woff2";else if("eot"==ba||/(\.eot)($|\?)/i.test(qa))ra="application/vnd.ms-fontobject";else if("sfnt"==ba||/(\.sfnt)($|\?)/i.test(qa))ra="application/font-sfnt";this.mapFontUrl(ra,qa,mxUtils.bind(this,function(pa,xa){this.loadUrl(xa,mxUtils.bind(this,function(Ca){this.cachedFonts[qa]=Ca;X--;U()}),mxUtils.bind(this,function(Ca){X--;U()}),!0,null,"data:"+pa+";charset=utf-8;base64,")}))}})(Editor.trimCssUrl(O[l].substring(0,aa)),ba)}U()}else A(l)};