Language: JavaScript
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
" "+Z.getStatus()})},X,this.timeout,function(){U&&null!=M&&M({code:App.ERROR_TIMEOUT,retry:Y})},V)});Y()}catch(Z){null!=M&&M(Z)}};Editor.prototype.absoluteCssFonts=function(m){var A=null;if(null!=m){var M=m.split("url(");if(0<M.length){A=[M[0]];m=window.location.pathname;var Q=null!=m?m.lastIndexOf("/"):-1;0<=Q&&(m=m.substring(0,Q+1));Q=document.getElementsByTagName("base");var U=null;null!=Q&&0<Q.length&&(U=Q[0].getAttribute("href"));for(var W=1;W<M.length;W++)if(Q=M[W].indexOf(")"),0<Q){var P=Editor.trimCssUrl(M[W].substring(0,
Q));this.graph.isRelativeUrl(P)&&(P=null!=U?U+P:window.location.protocol+"//"+window.location.hostname+("/"==P.charAt(0)?"":m)+P);A.push('url("'+P+'"'+M[W].substring(Q))}else A.push(M[W])}else A=[m]}return null!=A?A.join(""):null};Editor.prototype.mapFontUrl=function(m,A,M){/^https?:\/\//.test(A)&&!this.isCorsEnabledForUrl(A)&&(A=PROXY_URL+"?url="+encodeURIComponent(A));M(m,A)};Editor.prototype.embedCssFonts=function(m,A){var M=m.split("url("),Q=0;null==this.cachedFonts&&(this.cachedFonts={});var U=