Language: JavaScript
Label: safe
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
function(l){if(null!=l){Editor.prototype.fontCss=l;var z=document.getElementsByTagName("script")[0];if(null!=z&&null!=z.parentNode){var J=document.createElement("style");J.setAttribute("type","text/css");J.appendChild(document.createTextNode(l));z.parentNode.insertBefore(J,z);l=l.split("url(");for(J=1;J<l.length;J++){var O=l[J].indexOf(")");O=Editor.trimCssUrl(l[J].substring(0,O));var T=document.createElement("link");T.setAttribute("rel","preload");T.setAttribute("href",O);T.setAttribute("as","font");
T.setAttribute("crossorigin","");z.parentNode.insertBefore(T,z)}}}};Editor.trimCssUrl=function(l){return l.replace(RegExp("^[\\s\"']+","g"),"").replace(RegExp("[\\s\"']+$","g"),"")};Editor.GOOGLE_FONTS="https://fonts.googleapis.com/css?family=";Editor.GUID_ALPHABET="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-_";Editor.GUID_LENGTH=20;Editor.guid=function(l){l=null!=l?l:Editor.GUID_LENGTH;for(var z=[],J=0;J<l;J++)z.push(Editor.GUID_ALPHABET.charAt(Math.floor(Math.random()*Editor.GUID_ALPHABET.length)));