Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Aa);var za=document.createElement("div");za.style.display="flex";za.style.alignItems="center";za.style.boxSizing="border-box";za.style.whiteSpace="nowrap";za.style.position="absolute";za.style.overflow="hidden";za.style.bottom="6px";za.style.height="42px";za.style.right="10px";za.style.left="10px";ia.isEnabled()&&(za.appendChild(xa),za.appendChild(Ca),ra.appendChild(za));null!=X&&za.appendChild(X);return{div:ra,refresh:Aa}};Graph.prototype.getCustomFonts=function(){var l=this.extFonts;l=null!=l?l.slice():
[];for(var A in Graph.customFontElements){var O=Graph.customFontElements[A];l.push({name:O.name,url:O.url})}return l};Graph.prototype.setFont=function(l,A){Graph.addFont(l,A);document.execCommand("fontname",!1,l);if(null!=A){var O=this.cellEditor.textarea.getElementsByTagName("font");A=Graph.getFontUrl(l,A);for(var X=0;X<O.length;X++)O[X].getAttribute("face")==l&&O[X].getAttribute("data-font-src")!=A&&O[X].setAttribute("data-font-src",A)}};var B=Graph.prototype.isFastZoomEnabled;Graph.prototype.isFastZoomEnabled=