Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
" "+Y.getStatus()})},X,this.timeout,function(){P&&null!=H&&H({code:App.ERROR_TIMEOUT,retry:Z})},W)});Z()}catch(Y){null!=H&&H(Y)}};Editor.prototype.absoluteCssFonts=function(g){var y=null;if(null!=g){var H=g.split("url(");if(0<H.length){y=[H[0]];g=window.location.pathname;var O=null!=g?g.lastIndexOf("/"):-1;0<=O&&(g=g.substring(0,O+1));O=document.getElementsByTagName("base");var P=null;null!=O&&0<O.length&&(P=O[0].getAttribute("href"));for(var V=1;V<H.length;V++)if(O=H[V].indexOf(")"),0<O){var R=Editor.trimCssUrl(H[V].substring(0,
O));this.graph.isRelativeUrl(R)&&(R=null!=P?P+R:window.location.protocol+"//"+window.location.hostname+("/"==R.charAt(0)?"":g)+R);y.push('url("'+R+'"'+H[V].substring(O))}else y.push(H[V])}else y=[g]}return null!=y?y.join(""):null};Editor.prototype.mapFontUrl=function(g,y,H){/^https?:\/\//.test(y)&&!this.isCorsEnabledForUrl(y)&&(y=PROXY_URL+"?url="+encodeURIComponent(y));H(g,y)};Editor.prototype.embedCssFonts=function(g,y){var H=g.split("url("),O=0;null==this.cachedFonts&&(this.cachedFonts={});var P=