Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
N[aa].indexOf(")"),0<Z){var Y=Editor.trimCssUrl(N[aa].substring(0,Z));this.graph.isRelativeUrl(Y)&&(Y=null!=U?U+Y:window.location.protocol+"//"+window.location.hostname+("/"==Y.charAt(0)?"":l)+Y);B.push('url("'+Y+'"'+N[aa].substring(Z))}else B.push(N[aa])}else B=[l]}return null!=B?B.join(""):null};Editor.prototype.mapFontUrl=function(l,B,N){/^https?:\/\//.test(B)&&!this.isCorsEnabledForUrl(B)&&(B=PROXY_URL+"?url="+encodeURIComponent(B));N(l,B)};Editor.prototype.embedCssFonts=function(l,B){var N=l.split("url("),